WireGuard VPN Manager

WireGuard VPN Manager (LibreELEC)

A lightweight, high-performance Kodi service add-on for LibreELEC 12+ (Kodi 21 Omega). This tool manages WireGuard connections natively via connmanctl, providing a faster and more stable experience than traditional OpenVPN-based add-ons.

🚀 Features

• Multi-Provider Architecture: Native, integrated routing support across NordVPN, Private Internet Access (PIA), and Custom manual profile frameworks.
• Dynamic PIA WireGuard Handshake: Features an authenticated API endpoint handshake layer that automatically registers keys and parses split PGP signature tokens live.
• Native WireGuard Integration: Interfaces directly with LibreELEC's network stack for maximum speed and minimal routing overhead.
• Raspberry Pi 5 & 4 Optimized: Specifically tuned timing profiles and platform-specific network delay detection reduce VPN switching and recovery times for both Pi 4 and Pi 5.
• Live API Country Selector: Replaced manual configuration ID inputs with a live, provider-driven multi-select context menu interface.
• Space-Safe Service Matching: Space-to-underscore string normalization ensures 100% accurate tracking searches against complex ConnMan network names.
• Automated Credential Ingest: Separate, validated import loops read plaintext .txt or .key data files, execute instant Base64 encryption processing, and run auto-updates.
• Asynchronous State Shield: Centralized tracking flags inside /tmp prevent racing conditions and separate automated video plugin mapping sessions from manual menu overrides.
• Smart Auto-Mappings: Dynamically switches VPN locations based on the specific Kodi add-on or folder currently being browsed.
• 1Hz Physical Watchdog: A standalone systemd service monitors hardware carrier status every second for near-instant detection of cable pulls or link loss.
• Auto-Healing Failover: Detects physical interface changes (Ethernet ⇆ Wi-Fi) and automatically resets retry budgets to ensure seamless recovery.
• Stabilized Watchdog Settle: Fine-tuned delay metrics stop infinite connection loops during profile switches by allowing the interface routing table to normalize.
• Silent Transition Engine: Seamless background profile switching handles link changes quietly to prevent stream stuttering or player window failures.
• Aggressive Stream Recovery: Automatically kills "frozen" video players during network blackouts to prevent UI hangs and provide immediate error feedback.
• Intelligent Throttling: Implements a "Safety Fuse" logic that stands down after 10 failed reconnection attempts to preserve system resources and API provider query limits.
• High-Visibility Alerts: Enhanced Kodi notifications featuring art assets, ARGB colour formatting, custom audio cues (networkerror.wav), and persistent on-screen menu saving reminders.
• IPv6 Leak Protection: Kernel-level hardening and dynamic DNS management prevent data leaks during VPN transitions.
• Remote Optimized: Automatically maps F11 to trigger the VPN menu instantly from anywhere inside Kodi.

If you already know what you're doing, grab the repository installer here:
📦 Download Doemela Repo ZIP

Step 1: Install the Repository

1. Download the Doemela Repo ZIP file to your device (or use a USB stick).
2. Open Kodi and navigate to Add-ons.
3. Click the Box Icon (Add-on Browser) in the top-left corner.
4. Select Install from zip file.
   • If prompted, click 'Settings' and enable 'Unknown Sources', then go back.
5. Locate and select the repository.doemela-x.x.x.zip file.
6. Wait for the "Add-on installed" notification.

Step 2: Install WireGuard Manager

1. While still in the Add-on Browser, select Install from repository.
2. Choose the Doemela Repo.
3. Navigate to Services > WireGuard Manager for NordVPN.
4. Select Install.
5. Once the installation is complete, the Setup Wizard will launch automatically to guide you through the initial configuration and token import.

Quote

Tip: Installing via the Repository is the recommended method. It ensures you receive automatic updates for bug fixes and new Raspberry Pi 5 performance optimizations as soon as they are released.

Quote from deepee

Great work, thank you.

I've been hoping for something that would fill the gap left by the discontinued development of VPN Manager For OpenVPN.

However, my use case would be for PIA.

Any plans for a PIA (or other) variant, or tips to apply their tokens within your program structure?

Nothing planned, but it was in my head somebody would... will look into it, but I say this I will only do this kinda options, requests if the API of provider is public. Give me some time to get this ready for multi VPN providers I will contact you if I need anything to debug this like a token..., ... or if you capable you could debug a non-public version.

📘 VPN Provider Integration Policy

This page outlines the strict technical standards required for adding new VPN provider integrations into the WireGuard Manager addon.

To keep this open-source project maintainable, fast, and free of architectural clutter, new provider integrations will only be considered if their backend infrastructure meets modern, clean development standards (like NordVPN).

If a provider relies on messy, multi-layered, or dynamic handshake mechanisms, it will be rejected automatically.

🟢 What We Accept (The "Good Stuff")

We look for clean, predictable, and standard implementations. A provider will be considered if it features:

• Flat Public JSON Endpoints: A single, publicly reachable URL that outputs a straightforward, flat list of servers, their target hostname IPs, and their active protocols.
• Static Profile Generation: The provider allows the extraction of a permanent Private/Public key pair from your account dashboard. The configuration profiles can be compiled instantly on local storage without calling active background helper tools.
• Standard DNS Compatibility: The endpoints respect standard WAN/LAN routing rules and allow clean public DNS routing inside the tunnel boundaries.

🔴 What We Reject (The "Grief Standards")

We will not spend days reverse-engineering closed, broken, or undocumented backend platforms. A provider is automatically disqualified if it uses:

• Deeply Nested Regional Protocols: Massive, nested dictionary trees that force the add-on to spend valuable CPU cycles filtering across overlapping open-source protocols.
• Dynamic Node Registration Handshakes: The infrastructure requires the addon to execute dynamic API requests over local server ports (e.g., hitting individual endpoint nodes on port 1337 to complete token handshakes). Port 1337? "Leet?" my ass—I am the leet! hacker doing all the heavy lifting to fix their broken certificate rules here.
• Proprietary Network Blocks: The servers actively block standard data packet structures, or require internal fallback maps just to keep name resolution working.
• Closed/Hidden Source Code: If your provider requires a proprietary, closed-source client app to connect or fetch profiles, it cannot be integrated into this native Kodi service.

📥 How to Request a New Provider

If your desired provider meets all the green-lit requirements above:

1. Open a new Feature Request using the official issue form template on our GitHub.
2. Provide direct links to the provider's official, open public API developer documentation.
3. Provide a working sample of a raw, unedited JSON server-list array response.

Requests that do not include working public documentation links or are missing the verified checklist will be closed automatically to keep repository history clean.