From 6ba696ff2bca94ce451e409ea5f6a5d84ae1c0ed Mon Sep 17 00:00:00 2001
From: Eduardo David Paredes Vara <admin@thehomelesssherlock.com>
Date: Mon, 25 May 2026 05:48:28 +0000
Subject: [PATCH] =?UTF-8?q?fix(wireguard):=20actualizar=20stack=20VPN=20y?=
 =?UTF-8?q?=20documentaci=C3=B3n?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 wireguard/README.md          |  8 ++++----
 wireguard/docker-compose.yml | 16 ++++++++++++----
 wireguard/stack.env          | 35 +++++++++++++++++++----------------
 3 files changed, 35 insertions(+), 24 deletions(-)

diff --git a/wireguard/README.md b/wireguard/README.md
index f2ce84a..cd5a8a4 100644
--- a/wireguard/README.md
+++ b/wireguard/README.md
@@ -43,12 +43,12 @@ sudo apt install wireguard         # Debian/Ubuntu
    - Repository URL: `<tu-repositorio>`
    - Repository reference: `main`
    - Compose path: `wireguard/docker-compose.yml`
-5. Carga el archivo de variables de entorno: `wireguard/stack.env`
+5. Copia `wireguard/stack.env` a `wireguard/.env` y carga `wireguard/.env` como archivo de variables de entorno
 6. Haz clic en **Deploy the stack**
 
 ### Variables de Entorno
 
-Edita el archivo `stack.env`:
+Edita el archivo `.env`:
 
 ```env
 # Imagen
@@ -328,7 +328,7 @@ sudo apt install wireguard         # Debian/Ubuntu
 
 ### IPv6 causa problemas
 
-Desactiva IPv6 en `stack.env`:
+Desactiva IPv6 en `.env`:
 
 ```env
 DISABLE_IPV6=true
@@ -374,7 +374,7 @@ docker restart wg-easy
 ## 🔄 Actualizaciones
 
 1. Haz backup de `/opt/wireguard/data/`
-2. Actualiza en `stack.env`:
+2. Actualiza en `.env`:
    ```env
    WG_EASY_IMAGE=ghcr.io/wg-easy/wg-easy:latest
    ```
diff --git a/wireguard/docker-compose.yml b/wireguard/docker-compose.yml
index 846b19a..c6dd552 100644
--- a/wireguard/docker-compose.yml
+++ b/wireguard/docker-compose.yml
@@ -17,14 +17,16 @@ services:
       WG_HOST: ${WG_HOST}
       WG_PORT: ${WG_PORT}
       PORT: ${WG_UI_PORT}
+
       INIT_ENABLED: ${INIT_ENABLED}
       INIT_USERNAME: ${INIT_USERNAME}
       INIT_PASSWORD: ${INIT_PASSWORD}
+
       DISABLE_IPV6: ${DISABLE_IPV6}
 
     volumes:
-      - /opt/wg-easy:/etc/wireguard:Z
-      - /lib/modules:/lib/modules:ro,Z
+      - ${WG_DATA_PATH}:/etc/wireguard:Z
+      - ${WG_MODULES_PATH}:/lib/modules:ro,Z
 
     ports:
       - "${WG_UDP_PORT}:${WG_PORT}/udp"
@@ -35,9 +37,15 @@ services:
       - proxy
 
     labels:
-      traefik.http.services.wg.loadbalancer.server.port: "51821"
+      traefik.enable: "true"
+      traefik.docker.network: "${TRAEFIK_DOCKER_NETWORK}"
+      traefik.http.routers.wg.rule: "Host(`${WG_DOMAIN}`)"
+      traefik.http.routers.wg.entrypoints: "${TRAEFIK_ENTRYPOINT_SECURE}"
+      traefik.http.routers.wg.tls.certresolver: "${TRAEFIK_CERTRESOLVER}"
+      traefik.http.routers.wg.service: "wg"
+      traefik.http.routers.wg.middlewares: "crowdsec-bouncer@file,${TRAEFIK_AUTH_MIDDLEWARE}"
+      traefik.http.services.wg.loadbalancer.server.port: "${WG_UI_PORT}"
 
 networks:
   proxy:
     external: true
-
diff --git a/wireguard/stack.env b/wireguard/stack.env
index c5bbee7..aba2378 100644
--- a/wireguard/stack.env
+++ b/wireguard/stack.env
@@ -1,22 +1,25 @@
 ##### wg-easy #####
-WG_EASY_IMAGE=
-WG_HOST=
-WG_PORT=
+WG_EASY_IMAGE=ghcr.io/wg-easy/wg-easy:15.2.2
+WG_HOST=app.example.com
+WG_PORT=51820
 WG_UI_PORT=51821
 
-INIT_ENABLED=
-INIT_USERNAME=
-INIT_PASSWORD=
-DISABLE_IPV6=
+INIT_ENABLED=true
+INIT_USERNAME=example-user
+INIT_PASSWORD=change-me
+DISABLE_IPV6=true
 
-WG_DATA_PATH=
-WG_MODULES_PATH=
-WG_UDP_PORT=
+WG_DATA_PATH=/opt/wg-easy
+WG_MODULES_PATH=/lib/modules
+WG_UDP_PORT=51820
+TORRENT_PORT=6881
+TORRENT_PEER_IP=10.8.0.2
 
 ##### Traefik / dominios #####
-TRAEFIK_DOCKER_NETWORK=
-WG_DOMAIN=
-TRAEFIK_ENTRYPOINT_SECURE=
-TRAEFIK_CERTRESOLVER=
-TRAEFIK_AUTH_MIDDLEWARE=
-
+TRAEFIK_DOCKER_NETWORK=proxy
+WG_DOMAIN=app.example.com
+TRAEFIK_ENTRYPOINT_SECURE=websecure
+TRAEFIK_CERTRESOLVER=letsencrypt
+TRAEFIK_AUTH_MIDDLEWARE=ths-authentik@docker
+SERVICE_FQDN_WG_EASY=app.example.com
+SERVICE_URL_WG_EASY=https://app.example.com