mirror of https://github.com/wg-easy/wg-easy
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
51 lines
1.9 KiB
51 lines
1.9 KiB
version: "3.8"
|
|
|
|
services:
|
|
wg-easy:
|
|
environment:
|
|
- WG_HOST=${HOST}
|
|
- PASSWORD=foobar123
|
|
- WG_POST_UP=iptables -A FORWARD -i %i -j ACCEPT; iptables -A FORWARD -o %i -j ACCEPT; iptables -t nat -A POSTROUTING -o out -j MASQUERADE
|
|
- WG_POST_DOWN=iptables -D FORWARD -i %i -j ACCEPT; iptables -D FORWARD -o %i -j ACCEPT; iptables -t nat -D POSTROUTING -o out -j MASQUERADE
|
|
- LANG=en
|
|
# Optional:
|
|
# - PASSWORD_HASH=$$2y$$10$$hBCoykrB95WSzuV4fafBzOHWKu9sbyVa34GJr8VV5R/pIelfEMYyG (needs double $$, hash of 'foobar123'; see "How_to_generate_an_bcrypt_hash.md" for generate the hash)
|
|
# - PORT=51821
|
|
# - WG_PORT=51820
|
|
# - WG_CONFIG_PORT=92820
|
|
# - WG_DEFAULT_ADDRESS=10.8.0.x
|
|
# - WG_DEFAULT_DNS=1.1.1.1
|
|
# - WG_MTU=1420
|
|
# - WG_ALLOWED_IPS=192.168.15.0/24, 10.0.1.0/24
|
|
- WG_PERSISTENT_KEEPALIVE=25
|
|
# - WG_PRE_UP=echo "Pre Up" > /etc/wireguard/pre-up.txt
|
|
# - WG_POST_UP=echo "Post Up" > /etc/wireguard/post-up.txt
|
|
# - WG_PRE_DOWN=echo "Pre Down" > /etc/wireguard/pre-down.txt
|
|
# - WG_POST_DOWN=echo "Post Down" > /etc/wireguard/post-down.txt
|
|
# - UI_TRAFFIC_STATS=true
|
|
# - UI_CHART_TYPE=0 # (0 Charts disabled, 1 # Line chart, 2 # Area chart, 3 # Bar chart)
|
|
image: ghcr.io/wg-easy/wg-easy
|
|
container_name: wg-easy
|
|
hostname: wg-easy
|
|
ports:
|
|
- "51820:51820/udp"
|
|
- "51821:51821/tcp"
|
|
restart: unless-stopped
|
|
cap_add:
|
|
- NET_ADMIN
|
|
- SYS_MODULE
|
|
sysctls:
|
|
- net.ipv4.ip_forward=1
|
|
- net.ipv4.conf.all.src_valid_mark=1
|
|
|
|
# nginx:
|
|
# image: weejewel/nginx-with-certbot
|
|
# container_name: nginx
|
|
# hostname: nginx
|
|
# volumes:
|
|
# - ${HOME}/.nginx/servers/:/etc/nginx/servers/
|
|
# - ./.nginx/letsencrypt/:/etc/letsencrypt/
|
|
# ports:
|
|
# - "80:80/tcp"
|
|
# - "443:443/tcp"
|
|
# restart: unless-stopped
|
|
|