Ovira

Website & docs  ·  مستندات فارسی  ·  README فارسی  ·  Releases

Ovira is a self-hosted VPN panel for Linux servers: one binary with the web UI built in. Create clients with traffic and time limits, hand each one a single subscription link, and run OpenVPN, WireGuard / AmneziaWG, OpenConnect, IKEv2 and L2TP/IPsec on the panel's own server and on as many nodes as your plan allows. Send traffic out through other servers with outbound routing. No Docker, no database to set up, no config files to edit.

Ovira 1.0 is out. Outbound routing with Cloudflare WARP and NordVPN in one click, IKEv2 and L2TP/IPsec, Let's Encrypt certificates for every node, a choosable panel port and a separate subscription port. See what's new.

⚡ One command

A single script installs the panel (or a node), gets an HTTPS certificate and prints your login. Then ovira on the server is your control menu.

🌍 Many servers

Add nodes in minutes. A client works on all of them, and its device limit counts across every server and every protocol.

📱 Clients love it

Each client gets a page with remaining traffic, days left, one-tap import and ready-made setup files, in English and Persian.

Install

On a fresh server running Ubuntu 22.04 or newer (22.04, 24.04, 26.04), as root:

bash <(curl -fsSL https://raw.githubusercontent.com/Erfan-XRay/Ovira/main/install.sh)

The script downloads Ovira itself, so there is nothing to copy over first, and it asks what to install:

Choose	What it is
Panel	The web panel. It asks for the panel port (default 2053), an optional separate subscription port, whether this server is also a node, and how to get HTTPS: a Let's Encrypt certificate for your domain, for the server's IP, or none. Then it prints the address and your password.
Node	An extra VPN server for a panel running elsewhere. In the panel, Nodes → Connect a node shows the exact command, ready to copy.

Downloads are checked against the release checksums, and against the release signature when the server has OpenSSL 3. Prefer no questions? Everything can be passed as options, see the install guide.

# a node, answering only your panel
bash <(curl -fsSL https://raw.githubusercontent.com/Erfan-XRay/Ovira/main/node.sh) --panel-ip PANEL_IP

# a panel only, it manages other nodes
bash <(curl -fsSL https://raw.githubusercontent.com/Erfan-XRay/Ovira/main/install.sh) panel --panel-only

# no questions at all, subscription links on their own port
bash <(curl -fsSL https://raw.githubusercontent.com/Erfan-XRay/Ovira/main/install.sh) panel --yes \
  --port 8443 --sub-port 2096 --ssl domain --domain panel.example.com --email [email protected]

The installer creates no inbounds; create them in the panel under Inbounds and attach them to a node. A panel-only server can become a node later with ovira local-node enable.

What's new in 1.0

Outbound routing	Send your VPN clients' traffic out through another server, per node, from the new Routing page. Add VLESS, VMess, Trojan, Shadowsocks, Hysteria2, WireGuard, SOCKS or HTTP outbounds field by field or from a link, then route by site lists (geosite / geoip), domains, IPs, ports or inbound, or send everything.
WARP and NordVPN	Create a Cloudflare WARP (free or WARP+) or NordVPN (NordLynx) outbound in one click.
Outbound test	Test any outbound from the main server or a node: whether it connects, its latency, and the exit IP and country.
IKEv2 and L2TP/IPsec	Two new protocols for the VPN clients built into phones and computers, with downloadable setup files for iPhone, iPad, Mac, Android and Windows.
Certificates	Request Let's Encrypt certificates for nodes and the main server from the Certificates page, use them in inbounds and for the panel's HTTPS. They renew on their own.
Nodes	A simpler list with a details panel; install and remove protocols from the panel; update every node at once.
Panel and subscription ports	Choose the panel port at install and change it later in Settings; serve subscription links on a separate port if you like.

Update the panel and its nodes together. The full notes are on the releases page.

The ovira command

After installing, ovira opens a menu on the server, and every entry is also a command.

Command	What it does
ovira status	Version, panel address, license, running services; tells you when an update is out
ovira update	Install the newest release (stable or --beta)
ovira password	New password for a panel admin: your own, or a strong random one
ovira license	License and machine ID
ovira ssl	HTTPS certificate for a domain or an IP
ovira local-node enable	Make the panel's own server a node too (disable to undo)
ovira logs · restart · backup · uninstall	Exactly what they say

This is the beginning of the README. Read the rest at the original. Read the full README ↗