diff --git a/docker-compose.yml b/docker-compose.yml index 3b56f20..4f7d583 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -19,33 +19,37 @@ services: private_network: ipv4_address: 10.2.0.200 - wireguard: + wg-easy: depends_on: [unbound, pihole] - image: linuxserver/wireguard - container_name: wireguard + environment: + # ⚠️ Required: + # Change this to your host's public address + - WG_HOST= my.ddns.net + + # Optional: + - PASSWORD=10h30 + - WG_PORT=51822 + - WG_DEFAULT_ADDRESS=10.6.0.x + - WG_DEFAULT_DNS=10.2.0.100 + # - WG_ALLOWED_IPS=192.168.15.0/24, 10.0.1.0/24 + + image: weejewel/wg-easy + container_name: wg-easy + volumes: + - .:/etc/wireguard + ports: + - "51822:51820/udp" + - "51821:51821/tcp" + restart: unless-stopped cap_add: - NET_ADMIN - SYS_MODULE - environment: - - PUID=1000 - - PGID=1000 - - TZ=America/Los_Angeles # Change to your timezone - - SERVERPORT=51820 - #- SERVERURL=my.ddns.net #optional - For use with DDNS (Uncomment to use) - - PEERS=1 # How many peers to generate for you (clients) - - PEERDNS=10.2.0.100 # Set it to point to pihole - - INTERNAL_SUBNET=10.6.0.0 - - volumes: - - ./wireguard:/config - - /lib/modules:/lib/modules - ports: - - "51820:51820/udp" + sysctls: + - net.ipv4.ip_forward=1 + - net.ipv4.conf.all.src_valid_mark=1 dns: - 10.2.0.100 # Points to pihole - 10.2.0.200 # Points to unbound - sysctls: - - net.ipv4.conf.all.src_valid_mark=1 restart: unless-stopped networks: @@ -62,7 +66,7 @@ services: - 127.0.0.1 - 10.2.0.200 # Points to unbound environment: - TZ: "America/Los_Angeles" + TZ: "Asia/Hong_Kong" WEBPASSWORD: "" # Blank password - Can be whatever you want. ServerIP: 10.1.0.100 # Internal IP of pihole DNS1: 10.2.0.200 # Unbound IP @@ -77,4 +81,4 @@ services: - NET_ADMIN networks: private_network: - ipv4_address: 10.2.0.100 + ipv4_address: 10.2.0.100 \ No newline at end of file