14. One-Time Links
Overview
One-Time Links (OTL) provide a self-service way for end users to download their VPN configuration files without accessing the admin panel. When a link is generated for a client, the user can:
- View VPN connection instructions
- Download WireGuard configuration and scan a QR code
- Download AmneziaWG obfuscated configuration and scan a QR code
- Download the OpenVPN
.ovpnprofile - Download the IKEv2
.sswanprofile - See their credentials
Each link is a unique, cryptographically secure URL that can be used once or multiple times (configurable).
OTL Configuration
One-Time Link configuration
| Setting | Description |
|---|---|
| Enabled | Enable/disable the OTL feature |
| Expiration | How long a link remains valid |
| Max uses | Number of times a link can be accessed (0 = unlimited) |
Protocol-Specific Configuration
Configure what is shown on the OTL page for each protocol:
OTL WireGuard page configuration
OTL AmneziaWG page configuration
OTL IKEv2 page configuration
OTL OpenVPN page configuration
Active Links
Active one-time links
The list shows all generated links with their creation date, client, and usage count.
Generating a Link
Links can be generated from two places:
From the Clients List
- Go to Clients > List of clients
- Click the OTL button on any client row
From the Client Edit Page
- Open any client for editing
- In the One-Time Link section, click Create
One-time link created for a client
Copy the URL and send it to the end user. They will see a branded page with their VPN configuration for all enabled protocols.
End User Experience
When the user opens the OTL URL, they see a clean, modern self-service interface with tabs for each enabled VPN protocol. The user can download client apps, configurations, credentials, and scan mobile QR codes.
WireGuard
One-Time Link — WireGuard view with scannable QR code, config download, and official client links (Android, iOS, Windows, macOS)
AmneziaWG (Anti-Censorship)
One-Time Link — AmneziaWG view with obfuscated parameters, QR code, and AmneziaWG client links
OpenVPN
One-Time Link — OpenVPN view with user credentials and downloadable profile
IKEv2
One-Time Link — IKEv2 view with server hostname, credentials, Root CA certificate, .sswan profile, and strongSwan client links