homelab/fighter/config/wireguard/docker-compose.yml

32 lines
829 B
YAML
Raw Normal View History

2024-02-15 02:09:59 -08:00
version: '3.9'
2022-02-08 17:00:27 -08:00
services:
2022-04-28 12:24:05 -07:00
wg-easy:
image: weejewel/wg-easy
container_name: wireguard_wg-easy
restart: "no"
2022-04-28 12:43:51 -07:00
env_file:
- path: ./wireguard.env
required: true
- path: ./wireguard_secrets.env
required: false
2022-04-28 12:24:05 -07:00
ports:
2022-04-28 12:38:57 -07:00
- 53820:51820/udp
2022-04-28 12:26:37 -07:00
networks:
- web
2022-04-28 12:24:05 -07:00
volumes:
2022-04-28 12:54:24 -07:00
- ${DOCKER_DATA}/wg-easy:/etc/wireguard
2022-04-28 12:24:05 -07:00
cap_add:
- NET_ADMIN
- SYS_MODULE
sysctls:
- net.ipv4.conf.all.src_valid_mark=1
- net.ipv4.ip_forward=1
labels:
- traefik.http.routers.wg-easy.rule=Host(`vpn.jafner.net`)
- traefik.http.routers.wg-easy.tls.certresolver=lets-encrypt
2022-04-28 12:26:37 -07:00
- traefik.http.services.wg-easy.loadbalancer.server.port=51821
- traefik.http.routers.wg-easy.middlewares=traefik-forward-auth@file
2022-04-28 12:26:37 -07:00
networks:
web:
external: true