homelab/server/config/wireguard/docker-compose.yml

50 lines
1.3 KiB
YAML
Raw Normal View History

2022-02-08 17:00:27 -08:00
version: "3"
services:
2022-04-28 12:24:05 -07:00
wg-easy:
image: weejewel/wg-easy
container_name: wireguard_wg-easy
restart: unless-stopped
2022-04-28 12:43:51 -07:00
env_file:
- .secret
2022-04-28 12:24:05 -07:00
ports:
2022-04-28 12:38:57 -07:00
- 53820:51820/udp
2022-04-28 12:26:37 -07:00
networks:
- web
2022-04-28 12:24:05 -07:00
volumes:
2022-04-28 12:54:24 -07:00
- ${DOCKER_DATA}/wg-easy:/etc/wireguard
2022-04-28 12:24:05 -07:00
cap_add:
- NET_ADMIN
- SYS_MODULE
sysctls:
- net.ipv4.conf.all.src_valid_mark=1
- net.ipv4.ip_forward=1
labels:
- traefik.http.routers.wg-easy.rule=Host(`vpn.jafner.net`)
- traefik.http.routers.wg-easy.tls.certresolver=lets-encrypt
2022-04-28 12:26:37 -07:00
- traefik.http.services.wg-easy.loadbalancer.server.port=51821
2022-04-28 14:04:41 -07:00
wg-easy-guest:
image: weejewel/wg-easy
container_name: wireguard_wg-easy_guest
restart: unless-stopped
env_file:
- guest.secret
ports:
- 53821:51820/udp
networks:
- web
volumes:
- ${DOCKER_DATA}/wg-easy-guest:/etc/wireguard
cap_add:
- NET_ADMIN
- SYS_MODULE
sysctls:
- net.ipv4.conf.all.src_valid_mark=1
- net.ipv4.ip_forward=1
labels:
- traefik.http.routers.wg-easy-guest.rule=Host(`gvpn.jafner.net`)
- traefik.http.routers.wg-easy-guest.tls.certresolver=lets-encrypt
- traefik.http.services.wg-easy-guest.loadbalancer.server.port=51821
2022-04-28 12:26:37 -07:00
networks:
web:
external: true