fix(wireguard): actualizar stack VPN y documentación

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

wireguard/docker-compose.yml

@@ -17,14 +17,16 @@ services:
       WG_HOST: ${WG_HOST}
       WG_PORT: ${WG_PORT}
       PORT: ${WG_UI_PORT}
+
       INIT_ENABLED: ${INIT_ENABLED}
       INIT_USERNAME: ${INIT_USERNAME}
       INIT_PASSWORD: ${INIT_PASSWORD}
+
       DISABLE_IPV6: ${DISABLE_IPV6}
 
     volumes:
-      - /opt/wg-easy:/etc/wireguard:Z
-      - /lib/modules:/lib/modules:ro,Z
+      - ${WG_DATA_PATH}:/etc/wireguard:Z
+      - ${WG_MODULES_PATH}:/lib/modules:ro,Z
 
     ports:
       - "${WG_UDP_PORT}:${WG_PORT}/udp"
@@ -35,9 +37,15 @@ services:
       - proxy
 
     labels:
-      traefik.http.services.wg.loadbalancer.server.port: "51821"
+      traefik.enable: "true"
+      traefik.docker.network: "${TRAEFIK_DOCKER_NETWORK}"
+      traefik.http.routers.wg.rule: "Host(`${WG_DOMAIN}`)"
+      traefik.http.routers.wg.entrypoints: "${TRAEFIK_ENTRYPOINT_SECURE}"
+      traefik.http.routers.wg.tls.certresolver: "${TRAEFIK_CERTRESOLVER}"
+      traefik.http.routers.wg.service: "wg"
+      traefik.http.routers.wg.middlewares: "crowdsec-bouncer@file,${TRAEFIK_AUTH_MIDDLEWARE}"
+      traefik.http.services.wg.loadbalancer.server.port: "${WG_UI_PORT}"
 
 networks:
   proxy:
     external: true
-