feat: add WireGuard VPN stack (wg-easy, named wireguard)

This commit is contained in:
Thierry Pouplier
2026-05-05 01:21:17 +00:00
parent 4a57ca69b2
commit eea6db3ceb

View File

@@ -2,19 +2,26 @@ version: "3.8"
services: services:
wireguard: wireguard:
image: ghcr.io/linuxserver/wireguard:latest image: weejewel/wg-easy:latest
container_name: wireguard container_name: wireguard
cap_add: cap_add:
- NET_ADMIN - NET_ADMIN
- SYS_MODULE - SYS_MODULE
environment: environment:
- PUID=1000 - WG_HOST=vpn.lazyworkhorse.net
- PGID=1000 - PASSWORD=${WG_PASSWORD}
- TZ=America/Montreal - WG_PORT=51820
- WG_DEFAULT_ADDRESS=10.8.0.x
- WG_DEFAULT_DNS=1.1.1.1,8.8.8.8
- WG_ALLOWED_IPS=0.0.0.0/0, ::/0
- WG_PERSISTENT_KEEPALIVE=25
- UI_TRAFFIC_STATS=true
- UI_CHART_TYPE=0
ports: ports:
- "51820:51820/udp" - "51820:51820/udp"
- "51821:51821/tcp"
volumes: volumes:
- /mnt/HoardingCow_docker_data/WireGuard:/config:rw - /mnt/HoardingCow_docker_data/WireGuard:/etc/wireguard:rw
sysctls: sysctls:
- net.ipv4.conf.all.src_valid_mark=1 - net.ipv4.conf.all.src_valid_mark=1
- net.ipv4.ip_forward=1 - net.ipv4.ip_forward=1