volumes:
etc_wireguard:
services:
wireguard:
environment:
- LANG=de
- WG_HOST= #deine dyndns adresse
- PASSWORD_HASH= #Dein PasswordHash
- PORT=51821
- WG_PORT=51820
- WG_POST_UP=iptables -I FORWARD -i wg0 -d 192.168.178.0/24 -j REJECT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
- WG_POST_DOWN=iptables -I FORWARD -D wg0 -d 192.168.178.0/24 -j REJECT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE
image: ghcr.io/wg-easy/wg-easy
container_name: wireguard
volumes:
- /dein_speicherort/wireguard:/etc/wireguard
ports:
- "51820:51820/udp"
- "51821:51821/tcp"
restart: unless-stopped
cap_add:
- NET_ADMIN
- SYS_MODULE
sysctls:
- net.ipv4.ip_forward=1
- net.ipv4.conf.all.src_valid_mark=1