Connect your DigitalOcean account and deploy WireGuard VPN servers automatically. TunnelFleet creates the Droplet, configures WireGuard via cloud-init, and manages everything from a single dashboard. No SSH required.
DigitalOcean Droplets are a popular choice for VPN servers: the pricing is transparent, the API is clean, and Droplets start in under a minute.
TunnelFleet uses the DigitalOcean v2 API to create and manage Droplets in your account. The integration uses cloud-init to bootstrap the WireGuard configuration on first boot, so the server is ready before TunnelFleet even finishes polling for the IP address.
All Droplets are created in your DigitalOcean account. You retain full ownership and direct access. TunnelFleet is the management layer, not the host.
25+ global regions
Deploy VPN servers close to your users across North America, Europe, Asia, and more.
Transparent pricing
DigitalOcean Droplets start at $4/month. No hidden fees or complex pricing tiers.
First-class API
The DigitalOcean API is well-documented, stable, and supports full Droplet lifecycle management.
Fast provisioning
Droplets are typically ready in under 60 seconds, making TunnelFleet's 2-minute provisioning realistic.
Add your DigitalOcean Personal Access Token in the TunnelFleet dashboard. Only write access is required for Droplet creation. You can scope it to a specific project.
# In TunnelFleet dashboard:
# Settings → Cloud Providers → DigitalOcean
# Paste your Personal Access Token
# (Read + Write scope required)Select the DigitalOcean region closest to your users. TunnelFleet will show available Droplet sizes. A $6/month Basic Droplet (1 vCPU / 1GB RAM) is sufficient for most VPN workloads.
TunnelFleet calls the DigitalOcean API to create the Droplet with a cloud-init script. WireGuard is installed, keys are generated, firewall rules are applied, and the service starts — all without SSH.
#cloud-config
# (simplified — TunnelFleet handles this automatically)
packages:
- wireguard
runcmd:
- wg genkey | tee /etc/wireguard/privatekey | wg pubkey > /etc/wireguard/publickey
- chmod 600 /etc/wireguard/privatekey
- # configure wg0, ip forwarding, firewall...
- systemctl enable --now wg-quick@wg0TunnelFleet creates standard DigitalOcean Droplets. The minimum requirements are:
DigitalOcean charges you directly for Droplets. TunnelFleet charges a separate subscription for the management platform.
Suitable for personal use or small teams (up to ~20 concurrent users)
Recommended for business teams with higher throughput requirements
* DigitalOcean pricing may change. Check digitalocean.com/pricing for current rates. Network egress is additional.
TunnelFleet provisions servers using cloud-init. You never need to open a terminal or manage SSH keys.
A cloud-init script bootstraps WireGuard, generates keys, configures the interface, and enables the service on first boot.
DigitalOcean firewall rules and server-level iptables are configured automatically to allow only the required WireGuard UDP port.
TunnelFleet polls your Droplets for health status and reports back to the dashboard. No external monitoring setup required.
All your DigitalOcean-hosted VPN servers appear in a single TunnelFleet dashboard regardless of region.
Invite team members to your TunnelFleet account. Control access per server without sharing SSH credentials.
Yes. TunnelFleet connects to your existing DigitalOcean account. Droplets are created and billed through your account directly. If you don't have one, you can sign up at digitalocean.com.
TunnelFleet requires a Personal Access Token with Read and Write permissions. It uses these to create, list, and delete Droplets, and to configure DigitalOcean Cloud Firewalls. The token is stored encrypted.
Yes. The cloud-init configuration used by TunnelFleet is documented in our open documentation. You can review exactly what runs on your server at first boot.
TunnelFleet only deletes Droplets when you explicitly request it from the dashboard. Droplets continue running and billing in your DigitalOcean account unless you delete them.
TunnelFleet supports all DigitalOcean regions where Ubuntu 22.04 is available. You can select the region when creating a new server in the dashboard.
TunnelFleet uses Ubuntu 22.04 LTS by default. WireGuard is available as a kernel module on Ubuntu 22.04 and installs cleanly via apt.
A $6/month Basic Droplet (1 vCPU / 1GB RAM) is the minimum. For small personal use, a 512MB instance may work but is not recommended due to kernel memory requirements. For business use, a 1 vCPU / 1GB or larger is recommended.
Connect your account, choose a region, and TunnelFleet handles the rest. No SSH, no manual configuration.