Sentinel VPN documentation (v2)

URL path: /v2/ · Stable simple app remains at /.

Public product overview for sentinel.webservice.digital · endpoint vpn.webservice.digital:51820.

1. Architecture

  • Landing & control plane: PHP + MariaDB (CloudPanel site sentinel-vpn-webservice).
  • Tunnel: WireGuard on vpn.webservice.digital:51820 (wg-sentinel).
  • Peers are enabled when you start a session and removed when it stops or expires.
  • Each account downloads an individual config file (opaque ID derived from email).

2. Public network map

172.20.0.0/24     Premium     unlimited, €9.99/mo
192.168.100.0/24  Guest       30 min, free

Only publicly available plans are listed here.

3. User lifecycle

  1. Register → default Guest plan → verify email if required.
  2. Download your individual WireGuard .conf (Windows-safe name, unique per email).
  3. Start a session in the dashboard so the server accepts your peer.
  4. Guest sessions auto-expire after the free time limit; Premium sessions stay until you stop them.
  5. Upgrade to Premium via billing when Stripe is configured (or ask support).

4. Billing

  • Self-serve Stripe checkout targets Premium when payment keys are configured.
  • See Pricing for public plans and session limits.
  • Webhook endpoint (operators): /v2/stripe-webhook.php

5. Security notes

  • Private keys stored AES-256-GCM encrypted at rest.
  • Passwords: Argon2id (fallback bcrypt).
  • Peer isolation: client-to-client traffic on the VPN interface is dropped.
  • Config download IDs are derived from email + server secret (no cleartext email in the file name).