Jafner.net/homelab/stacks/wireguard/docker-compose.yml

30 lines
792 B
YAML

services:
wg-easy:
image: weejewel/wg-easy:latest
container_name: wireguard_wg-easy
restart: "no"
environment:
WG_HOST: vpn.jafner.net
WG_PORT: 53820
WG_DEFAULT_DNS: 192.168.1.1
ports:
- 53820:51820/udp
networks:
- web
volumes:
- ${APPDATA}/wireguard:/etc/wireguard
cap_add:
- NET_ADMIN
- SYS_MODULE
sysctls:
- net.ipv4.conf.all.src_valid_mark=1
- net.ipv4.ip_forward=1
labels:
- traefik.http.routers.wg-easy.rule=Host(`vpn.jafner.net`)
- traefik.http.routers.wg-easy.tls.certresolver=lets-encrypt
- traefik.http.services.wg-easy.loadbalancer.server.port=51821
- traefik.http.routers.wg-easy.middlewares=traefik-forward-auth@file
networks:
web:
external: true