Initial wg-easy

server/config/sftp/.env

@@ -0,0 +1 @@
+DOCKER_DATA=/home/joey/data/wireguard

server/config/sftp/docker-compose.yml

@@ -0,0 +1,23 @@
+version: "3"
+services:
+  sftp:
+    image: linuxserver/wireguard
+    container_name: sftp_sftp
+    restart: unless-stopped
+    ports:
+      - 53820:51820/udp
+    cap_add:
+      - NET_ADMIN
+      - SYS_MODULE
+    environment:
+      - PUID=1000
+      - PGID=1000
+      - TZ=America/Los_Angeles
+      - PEERS=joey-phone,joey-xps13,maddie-phone,acearcher,nas,jafner-chat,jafner-tools
+      - SERVERURL=www.jafner.net
+      - SERVERPORT=53820
+    volumes:
+      - ${DOCKER_DATA}/config:/config
+      - /lib/modules:/lib/modules
+    sysctls:
+      - net.ipv4.conf.all.src_valid_mark=1

server/config/wireguard/docker-compose.yml

@@ -21,3 +21,24 @@ services:
       - /lib/modules:/lib/modules
     sysctls:
       - net.ipv4.conf.all.src_valid_mark=1
+  wg-easy:
+    image: weejewel/wg-easy
+    container_name: wireguard_wg-easy
+    restart: unless-stopped
+    ports:
+      - 53821:51820/udp
+    environment:
+      - WG_HOST=vpn.jafner.net
+      - PASSWORD=um5YEtjki5g6SkRsjyXRaFLNRgsqYk6r
+    volumes:
+      - ${DOCKER_DATA}/wg-easy:/etc/wireguard
+    cap_add:
+      - NET_ADMIN
+      - SYS_MODULE
+    sysctls:
+      - net.ipv4.conf.all.src_valid_mark=1
+      - net.ipv4.ip_forward=1
+    labels:
+      - traefik.http.routers.wg-easy.rule=Host(`vpn.jafner.net`)
+      - traefik.http.routers.wg-easy.tls.certresolver=lets-encrypt
+      - traefik.http.services.wg-easy.loadbalancer.server.port=51821