Protect Unifi Controller with VPN

I currently run a Unifi Controller on AWS Lightsail and all is well. Currently the management page is open to the public internet and I’d like to protect it using a VPN so I can remotely connect to it from anywhere. Can someone point me in the right direction for the easiest implementation?

Two secure options, SSH tunneling would be the quickest and easiest way as you would not need to install any extra software. And if you are using WIndows this works with putty as well.

https://www.ssh.com/ssh/tunneling/example

Another option would be to install OpenVPN on the server and connect to is that way. Here is an auto install script that automates the process. https://github.com/Nyr/openvpn-install

Hey Tom,

I was able to successfully configure OpenVPN on my cloud controller using your advice so thank you for that.

How can I configure my USG to connect to the server automatically so don’t have to use the local client VPN client on my laptop? There are MANY options in the USG and just need to be pointed in the right direction.

Thanks in advance,

Gabriel

I don’t use the USG for that, here is a guide to get you started
https://community.ui.com/questions/Setting-up-OpenVPN-client-in-USG/0220066b-6d7e-4ee5-9015-bdff0d58c625