Paste your AmneziaWG .conf file contents to generate ready-to-use MikroTik RouterOS commands
AmneziaWG Configuration File
All configuration and data is processed locally in your browser. Nothing is transmitted anywhere. Your private keys are safe.
WireGuard client on MikroTik + awg-proxy runs inside a Docker container directly on the router
Routes traffic to selected services through the tunnel using DNS forwarding (DoH). ⓘ
FastTrack rules will be modified (out-interface-list=WAN) to keep FastTrack active for non-VPN traffic. Uninstall script restores them.
All services will use this DNS-over-HTTPS (DoH) provider for domain resolution.
Monitors tunnel availability by pinging 1.1.1.1 through the WG interface. If the tunnel is down, disables its route — traffic falls back to the next tunnel (by distance) or goes direct. Re-enables the route when the tunnel recovers.
Change the prefix only if you need 2+ tunnels with different routing rules
Adding a new client to server
Devices will be able to reach each other by IP across subnets. What becomes possible: access NAS/file shares, IP cameras, printers by address, remote desktop (RDP/VNC), manage routers via WinBox/SSH, host game servers, access home automation (Home Assistant). Does NOT work: broadcast/multicast services. Note: each client only sees the server LAN by default. To connect two clients to each other, additional routes must be added manually.
Parsed parameters
MikroTik RouterOS Commands
Step 2: Routing Setup
Paste this AFTER Step 1 completes (wait for "Installation complete!").
Uninstall Commands
Side A (MikroTik 1) — client
Uninstall Side A (client)
Side B (MikroTik 2) — server
Uninstall Side B (server)
⚠️ SAVE THIS LINK FOR FUTURE CONFIGURATION
This link will also be saved in container env AWG_CONFIG_URL. To retrieve it later: /container/envs/print where key=AWG_CONFIG_URL