34 lines
1.1 KiB
YAML
34 lines
1.1 KiB
YAML
# compose-support.yml
|
|
# https://git.bizmark.cloud/marc/bizMark.git
|
|
services:
|
|
wireguard:
|
|
image: linuxserver/wireguard
|
|
container_name: wireguard
|
|
cap_add:
|
|
- NET_ADMIN
|
|
- SYS_MODULE
|
|
environment:
|
|
- PUID=1000
|
|
- PGID=1000
|
|
- TZ=Europe/Zurich
|
|
- SERVERURL=bizmark.ch # Public IP oder Domain
|
|
- SERVERPORT=51820
|
|
- PEERS=1 # Anzahl initialer Clients
|
|
- PEERDNS=auto # Aktuell so belassen
|
|
- INTERNAL_SUBNET=10.50.0.0/24 # Subnetz für VPN-Clients
|
|
- ALLOWEDIPS=192.168.100.0/24 # Zielnetz, das Clients über VPN erreichen sollen
|
|
- PERSISTENTKEEPALIVE_PEERS=all # hält den Tunnel offen (optional)
|
|
- DNS_SERVER=192.168.100.1 # Definiere den DNS-Server im LAN
|
|
volumes:
|
|
- /opt/wireguard/config:/config
|
|
- /lib/modules:/lib/modules
|
|
ports:
|
|
- 51820:51820/udp
|
|
sysctls:
|
|
net.ipv4.ip_forward: 1 # aktiviert IP-Forwarding im Container
|
|
restart: unless-stopped
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "wg show || exit 1"]
|
|
interval: 30s
|
|
timeout: 5s
|
|
retries: 3 |