Couldn't find anything on GitHub that did exactly this, so I cobbled it together myself :)
Hekate is a Debian 12/13 travel router you set up entirely in the browser.
What it does:
- VPN: Tailscale, WireGuard, OpenVPN - tunnel is shared across all AP clients
- Firewall: nftables input/forward/NAT/port-forwarding via GUI
- Clients: DHCP leases, bandwidth history, DNS overrides per device
I wanted a travel router where I could switch VPN exit nodes, manage
the AP and tweak firewall rules without touching the terminal. Didn't
find anything that did all of that, so I built it.
Hekate runs on any Debian system 12 or 13, sets up a
WiFi AP and routes all client traffic through Tailscale, WireGuard or
OpenVPN - switchable per AP from the UI.
Beyond the VPN routing it also handles:
- hostapd config (SSID, band, channel)
- DHCP leases + static entries + DNS overrides
- nftables firewall and port forwarding via UI
- Bandwidth graphs, connected clients, log viewer
