wireguard
|
144
|
0
|
未分类

170 字
|
3 分钟 
# https://github.com/wg-easy/wg-easy
# 生成密码 docker run --rm -it ghcr.io/wg-easy/wg-easy wgpw '1234567' # 如果密码中的 $ 使用 $$ 转义, 返回如下
# PASSWORD_HASH='xxxxxx'

version: '3.8'

services:
  wgservices-easy:
    image: ghcr.io/wg-easy/wg-easy
    # image:  weejewel/wg-easy
    container_name: wg-easy
    environment:
      - LANG=chs
      - WG_HOST= vpn.x.com # 因家中是 fakeIp，域名的话会出错，所以实际使用 ip 
      - WG_DEFAULT_ADDRESS=10.8.0.x
      - WG_DEFAULT_DNS=114.114.114.114, 223.5.5.5
      - PASSWORD_HASH='xxxxxx'
      - PORT=51821 # web ui 端口
      - WG_PORT=51820 # 监听的服务端口
      - UI_TRAFFIC_STATS=true
      - UI_CHART_TYPE=1
      # - WG_ALLOWED_IPS=192.168.0.0/24, 10.8.0.0/24
      # - WG_DEVICE=eth0@if165
    volumes:
      - ./data/.wg-easy:/etc/wireguard
    ports:
      - "51820:51820/udp" # 监听的服务端口
      # - "51821:51821/tcp" # web ui 端口
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    sysctls:
      - net.ipv4.conf.all.src_valid_mark=1
      - net.ipv4.ip_forward=1
    restart: unless-stopped
    networks:
      - nginx_default # 挂载至 nginx 的容器中

networks:
  nginx_default:
    external: true

https://medium.com/@xtarin/wireguard%E4%BB%8B%E7%BB%8D%E5%8F%8A%E5%AE%A2%E6%88%B7%E7%AB%AF%E4%BD%BF%E7%94%A8%E6%95%99%E7%A8%8B-2ae1eb4bf670

上一篇
下一篇