From ef00ac0251a2f22f7e17828628cd4455f6c0d75d Mon Sep 17 00:00:00 2001 From: Gabe Date: Wed, 1 Oct 2025 21:57:15 +0000 Subject: [PATCH] Update WG-Easy/Docker-Compose.yml --- WG-Easy/Docker-Compose.yml | 57 +++++++++++++++----------------------- 1 file changed, 22 insertions(+), 35 deletions(-) diff --git a/WG-Easy/Docker-Compose.yml b/WG-Easy/Docker-Compose.yml index 8de3913..b262968 100644 --- a/WG-Easy/Docker-Compose.yml +++ b/WG-Easy/Docker-Compose.yml @@ -1,42 +1,29 @@ services: wg-easy: - environment: - # Optional: - # - PORT=51821 - # - HOST=0.0.0.0 - # - INSECURE=false - - DISABLE_IPV6=true - - WG_HOST=wireguard.gabesville.com - - WG_PORT=51822 - - WG_MTU=1420 - - image: ghcr.io/wg-easy/wg-easy:latest - container_name: wg-easy - networks: - wg: - ipv4_address: 10.42.42.42 + image: ghcr.io/wg-easy/wg-easy + container_name: wg-easy + environment: # Environment variables to configure the instance. + - LANG=en # Language settings. + - WG_HOST= # Public IP or domain name where WG-Easy is accessible. + - PASSWORD= # Password for accessing the WG-Easy web interface. + - PORT=51821 # Port for the web interface. + - WG_PORT=51820 # WireGuard port for VPN traffic. + - WG_DEFAULT_ADDRESS=10.10.0.x + - WG_DEFAULT_DNS=192.168.X.X, 1.1.1.1 + # - WG_MTU=1420 + # - PORT=51821 + # - WG_PORT=51820 + # - WG_CONFIG_PORT=92820 + - WG_ALLOWED_IPS=0.0.0.0/0, ::/0 volumes: - - /srv/docker/wg-easy:/etc/wireguard # Volume mapping for WireGuard configuration files. - - /lib/modules:/lib/modules:ro + - /srv/docker/wg-easy:/etc/wireguard # Volume mapping for WireGuard configuration files. ports: - - "51822:51820/udp" # UDP port used by WireGuard. - - "51821:51821/tcp" # TCP port for accessing the web interface. - restart: unless-stopped - cap_add: # Capabilities required for managing networking features. + - "51820:51820/udp" # UDP port used by WireGuard. + - "51821:51821/tcp" # TCP port for accessing the web interface. + cap_add: # Capabilities required for managing networking features. - NET_ADMIN - SYS_MODULE - # - NET_RAW # ⚠️ Uncomment if using Podman - sysctls: # Kernel parameters that need to be set for WireGuard. - - net.ipv4.ip_forward=1 + sysctls: # Kernel parameters that need to be set for WireGuard. - net.ipv4.conf.all.src_valid_mark=1 - - net.ipv6.conf.all.disable_ipv6=0 - - net.ipv6.conf.all.forwarding=1 - - net.ipv6.conf.default.forwarding=1 - -networks: - wg: - driver: bridge - ipam: - driver: default - config: - - subnet: 10.42.42.0/24 \ No newline at end of file + - net.ipv4.ip_forward=1 + restart: unless-stopped \ No newline at end of file