Eduardo David Paredes Vara
60 lines
1.7 KiB
YAML
60 lines
1.7 KiB
YAML
services:
|
|
wg-easy:
|
|
image: ${WG_EASY_IMAGE}
|
|
container_name: wg-easy
|
|
restart: unless-stopped
|
|
|
|
cap_add:
|
|
- NET_ADMIN
|
|
- SYS_MODULE
|
|
|
|
sysctls:
|
|
net.ipv4.ip_forward: "1"
|
|
net.ipv4.conf.all.src_valid_mark: "1"
|
|
|
|
environment:
|
|
WG_HOST: ${WG_HOST}
|
|
WG_PORT: ${WG_PORT}
|
|
PORT: ${WG_UI_PORT}
|
|
|
|
INIT_ENABLED: ${INIT_ENABLED}
|
|
INIT_USERNAME: ${INIT_USERNAME}
|
|
INIT_PASSWORD: ${INIT_PASSWORD}
|
|
|
|
DISABLE_IPV6: ${DISABLE_IPV6}
|
|
|
|
OAUTH_PROVIDERS: ${OAUTH_PROVIDERS}
|
|
OAUTH_OIDC_SERVER: ${OAUTH_OIDC_SERVER}
|
|
OAUTH_OIDC_CLIENT_ID: ${OAUTH_OIDC_CLIENT_ID}
|
|
OAUTH_OIDC_CLIENT_SECRET: ${OAUTH_OIDC_CLIENT_SECRET}
|
|
OAUTH_OIDC_NAME: ${OAUTH_OIDC_NAME}
|
|
OAUTH_AUTO_REGISTER: ${OAUTH_AUTO_REGISTER}
|
|
OAUTH_ALLOWED_DOMAINS: ${OAUTH_ALLOWED_DOMAINS}
|
|
DISABLE_PASSWORD_AUTH: ${DISABLE_PASSWORD_AUTH}
|
|
|
|
volumes:
|
|
- ${WG_DATA_PATH}:/etc/wireguard:Z
|
|
- ${WG_MODULES_PATH}:/lib/modules:ro,Z
|
|
|
|
ports:
|
|
- "${WG_UDP_PORT}:${WG_PORT}/udp"
|
|
- "${TORRENT_PORT}:${TORRENT_PORT}/tcp"
|
|
- "${TORRENT_PORT}:${TORRENT_PORT}/udp"
|
|
|
|
networks:
|
|
- proxy
|
|
|
|
labels:
|
|
traefik.enable: "true"
|
|
traefik.docker.network: "${TRAEFIK_DOCKER_NETWORK}"
|
|
traefik.http.routers.wg.rule: "Host(`${WG_DOMAIN}`)"
|
|
traefik.http.routers.wg.entrypoints: "${TRAEFIK_ENTRYPOINT_SECURE}"
|
|
traefik.http.routers.wg.tls.certresolver: "${TRAEFIK_CERTRESOLVER}"
|
|
traefik.http.routers.wg.service: "wg"
|
|
traefik.http.routers.wg.middlewares: "crowdsec-bouncer@file,${TRAEFIK_AUTH_MIDDLEWARE}"
|
|
traefik.http.services.wg.loadbalancer.server.port: "${WG_UI_PORT}"
|
|
|
|
networks:
|
|
proxy:
|
|
external: true
|