Skip to content
Cyferio

Cyferio Docs

OpenVPN, Governed. Everything you need to install, restrict, and administer a self-hosted OpenVPN deployment.
QuickstartView on GitHub

Pronounced “SY-fer-yo” (/ˈsaɪfəryoʊ/) — from “cipher”.

Cyferio is a self-hosted OpenVPN toolkit and web admin: a Python-based installer/CLI for the VPN server itself, plus a FastAPI web app on top for everything an IT team actually needs day to day – who can connect, from which device, from where, using how much bandwidth, with a full record of every admin action.

Where to start

Section titled “Where to start”
QuickstartInstall the CLI toolkit, or bring up the full web admin with Docker Compose.
CLI ReferenceEvery openvpn-install.sh and vpn-status.py flag, with JSON output for scripting.
Device & Access RestrictionsMAC-address binding, plus per-client country/city/ASN/IP/OS/bandwidth restrictions.
Roles & PermissionsDynamic RBAC, the VPN profile <-> portal account link, and the self-service user experience.
Admin Login RestrictionsGate admin logins to this web app by country, city, network, or IP.
Deployment & ConfigurationDocker Compose, Traefik/TLS, Postgres, and releases.

What Cyferio is not

Section titled “What Cyferio is not”

Cyferio doesn’t replace OpenVPN, and it doesn’t reimplement its cryptography or tunneling. openvpn-install.sh and vpn-status.py remain the single source of truth for all VPN logic – the web app is a thin FastAPI frontend over those two scripts, calling them and rendering the result rather than duplicating their work. It’s also not a mesh-network replacement or a managed service: it’s self-hosted, MIT-licensed, and runs on infrastructure you control.