35 lines
1.4 KiB
YAML
35 lines
1.4 KiB
YAML
---
|
|
services:
|
|
wg-easy:
|
|
image: ghcr.io/wg-easy/wg-easy:latest # The Docker image to use.
|
|
container_name: wireguard # Name of the container.
|
|
env_file:
|
|
- .env
|
|
environment: # Environment variables to configure the ins>
|
|
- LANG=en # Language settings.
|
|
- WG_HOST=${WG_HOST} # Public IP or domain name whe>
|
|
- PASSWORD=${PASSWORD} # Password for accessing the WG-Easy web i>
|
|
- PORT=${PORT} # Port for the web interface.
|
|
- WG_PORT=${WG_PORT} # WireGuard port for VPN traffic.
|
|
volumes:
|
|
- ./data:/etc/wireguard # Volume mapping for WireG>
|
|
ports:
|
|
- "51820:51820/udp" # UDP port used by WireGuard.
|
|
- "51821:51821/tcp" # TCP port for accessing the web interface.
|
|
cap_add: # Capabilities required for managing network>
|
|
- NET_ADMIN
|
|
- SYS_MODULE
|
|
sysctls: # Kernel parameters that need to be set for >
|
|
- net.ipv4.conf.all.src_valid_mark=1
|
|
- net.ipv4.ip_forward=1
|
|
restart: unless-stopped # Ensures the container restarts automatical>
|
|
|
|
# Network to join in docker which is named below
|
|
networks:
|
|
- proxy
|
|
|
|
# create PROXY network for NPM security. This will allow NPM to see and talk to >
|
|
networks:
|
|
proxy:
|
|
external: true
|