Jafner.net/homelab/stacks/wireguard/docker-compose.yml

services:
  wg-easy:
    image: weejewel/wg-easy:latest
    container_name: wireguard_wg-easy
    restart: "no"
    environment:
      WG_HOST: vpn.jafner.net
      WG_PORT: 53820
      WG_DEFAULT_DNS: 192.168.1.1
    ports:
      - 53820:51820/udp
    networks:
      - web
    volumes:
      - ${APPDATA}/wireguard:/etc/wireguard
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    sysctls:
      - net.ipv4.conf.all.src_valid_mark=1
      - net.ipv4.ip_forward=1
    labels:
      - traefik.http.routers.wg-easy.rule=Host(`vpn.jafner.net`)
      - traefik.http.routers.wg-easy.tls.certresolver=lets-encrypt
      - traefik.http.services.wg-easy.loadbalancer.server.port=51821
      - traefik.http.routers.wg-easy.middlewares=traefik-forward-auth@file

networks:
  web:
    external: true
Init 2022-02-08 17:00:27 -08:00			`services:`
Initial wg-easy 2022-04-28 12:24:05 -07:00			`wg-easy:`
Pin images to latest, remove obsolete 'version' top-level compose element Pinning to digests was resulting in many stacks failing to come online with "manifest unknown" errors. Will look further into this. 2024-07-22 10:26:29 -07:00			`image: weejewel/wg-easy:latest`
Initial wg-easy 2022-04-28 12:24:05 -07:00			`container_name: wireguard_wg-easy`
Disable auto-start for all containers. (Set all restart: "no") 2022-07-13 10:47:27 -07:00			`restart: "no"`
Feature: Add stack.nix for wireguard. 2025-01-31 23:18:32 -08:00			`environment:`
			`WG_HOST: vpn.jafner.net`
			`WG_PORT: 53820`
			`WG_DEFAULT_DNS: 192.168.1.1`
Initial wg-easy 2022-04-28 12:24:05 -07:00			`ports:`
Replace wireguard with wg-easy 2022-04-28 12:38:57 -07:00			`- 53820:51820/udp`
Fix networking 2022-04-28 12:26:37 -07:00			`networks:`
			`- web`
Initial wg-easy 2022-04-28 12:24:05 -07:00			`volumes:`
Feature: Add stack.nix for wireguard. 2025-01-31 23:18:32 -08:00			`- ${APPDATA}/wireguard:/etc/wireguard`
Initial wg-easy 2022-04-28 12:24:05 -07:00			`cap_add:`
			`- NET_ADMIN`
			`- SYS_MODULE`
			`sysctls:`
			`- net.ipv4.conf.all.src_valid_mark=1`
			`- net.ipv4.ip_forward=1`
			`labels:`
			- traefik.http.routers.wg-easy.rule=Host(`vpn.jafner.net`)
			`- traefik.http.routers.wg-easy.tls.certresolver=lets-encrypt`
Fix networking 2022-04-28 12:26:37 -07:00			`- traefik.http.services.wg-easy.loadbalancer.server.port=51821`
#63 Remove lan-only@file where appropriate 2022-10-23 18:33:44 -07:00			`- traefik.http.routers.wg-easy.middlewares=traefik-forward-auth@file`
Fix networking 2022-04-28 12:26:37 -07:00
			`networks:`
			`web:`
			`external: true`