|
@@ -1,29 +1,32 @@
|
|
|
-version: '3.7'
|
|
|
+version: "3.7"
|
|
|
services:
|
|
|
wg-easy:
|
|
|
- container_name: wg-easy
|
|
|
- image: 'weejewel/wg-easy:latest'
|
|
|
- restart: unless-stopped
|
|
|
- volumes:
|
|
|
- - ${APP_DATA_DIR}:/etc/wireguard
|
|
|
- ports:
|
|
|
- - 51820:51820
|
|
|
- - ${APP_PORT}:51821
|
|
|
- environment:
|
|
|
- WG_HOST: '${WIREGUARD_HOST}'
|
|
|
- PASSWORD: '${WIREGUARD_PASSWORD}'
|
|
|
- cap_add:
|
|
|
- - NET_ADMIN
|
|
|
- - SYS_MODULE
|
|
|
- sysctls:
|
|
|
- - net.ipv4.conf.all.src_valid_mark=1
|
|
|
- - net.ipv4.ip_forward=1
|
|
|
- networks:
|
|
|
- - tipi_main_network
|
|
|
- # labels:
|
|
|
- # traefik.enable: true
|
|
|
- # traefik.http.routers.wireguard.rule: Host(`wireguard.tipi.home`)
|
|
|
- # traefik.http.routers.wireguard.service: wireguard
|
|
|
- # traefik.http.routers.wireguard.tls: true
|
|
|
- # traefik.http.routers.wireguard.entrypoints: websecure
|
|
|
- # traefik.http.services.wireguard.loadbalancer.server.port: 51821
|
|
|
+ container_name: wg-easy
|
|
|
+ image: "meienberger/wg-easy:latest"
|
|
|
+ restart: unless-stopped
|
|
|
+ network_mode: "host"
|
|
|
+ volumes:
|
|
|
+ - ${APP_DATA_DIR}:/etc/wireguard
|
|
|
+ - /lib/modules:/lib/modules
|
|
|
+ ports:
|
|
|
+ - 51820:51820/udp
|
|
|
+ - ${APP_PORT}:51821
|
|
|
+ environment:
|
|
|
+ WG_HOST: "${WIREGUARD_HOST}"
|
|
|
+ PASSWORD: "${WIREGUARD_PASSWORD}"
|
|
|
+ WG_DEFAULT_DNS: 8.8.8.8
|
|
|
+ WG_ALLOWED_IPS: 0.0.0.0/0,::/0
|
|
|
+ WG_FWMARK: 51820
|
|
|
+ cap_add:
|
|
|
+ - NET_ADMIN
|
|
|
+ - SYS_MODULE
|
|
|
+ # sysctls:
|
|
|
+ # - net.ipv4.conf.all.src_valid_mark=1
|
|
|
+ # - net.ipv4.ip_forward=1
|
|
|
+ # labels:
|
|
|
+ # traefik.enable: true
|
|
|
+ # traefik.http.routers.wireguard.rule: Host(`wireguard.tipi.home`)
|
|
|
+ # traefik.http.routers.wireguard.service: wireguard
|
|
|
+ # traefik.http.routers.wireguard.tls: true
|
|
|
+ # traefik.http.routers.wireguard.entrypoints: websecure
|
|
|
+ # traefik.http.services.wireguard.loadbalancer.server.port: 51821
|