9e82928049
- Remove traefik.enable, traefik.docker.network, traefik.http.routers.* from all services - Keep traefik.http.services.<name>.loadbalancer.server.port labels - Keep all middleware definitions (forwardauth, headers, redirects) - Add pull_policy: always to main/frontend services - Add proxy network + label to gitea and karakeep (previously missing) - Add COOLIFY-TEMPLATE.md reference guide Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
46 lines
998 B
YAML
46 lines
998 B
YAML
services:
|
|
wg-easy:
|
|
image: ${WG_EASY_IMAGE}
|
|
container_name: wg-easy
|
|
pull_policy: always
|
|
restart: unless-stopped
|
|
|
|
cap_add:
|
|
- NET_ADMIN
|
|
- SYS_MODULE
|
|
|
|
sysctls:
|
|
net.ipv4.ip_forward: "1"
|
|
net.ipv4.conf.all.src_valid_mark: "1"
|
|
|
|
environment:
|
|
WG_HOST: ${WG_HOST}
|
|
WG_PORT: ${WG_PORT}
|
|
PORT: ${WG_UI_PORT}
|
|
|
|
# Arranque desatendido (solo si el volumen está vacío)
|
|
INIT_ENABLED: ${INIT_ENABLED}
|
|
INIT_USERNAME: ${INIT_USERNAME}
|
|
INIT_PASSWORD: ${INIT_PASSWORD}
|
|
|
|
# Evita reglas ip6tables (tabla nat inexistente en el host)
|
|
DISABLE_IPV6: ${DISABLE_IPV6}
|
|
|
|
volumes:
|
|
- ${WG_DATA_PATH}:/etc/wireguard:Z
|
|
- ${WG_MODULES_PATH}:/lib/modules:ro,Z
|
|
|
|
# Puerto UDP de WireGuard expuesto al mundo
|
|
ports:
|
|
- "${WG_UDP_PORT}:${WG_PORT}/udp"
|
|
|
|
networks:
|
|
- proxy
|
|
|
|
labels:
|
|
traefik.http.services.wg.loadbalancer.server.port: "${WG_UI_PORT}"
|
|
|
|
networks:
|
|
proxy:
|
|
external: true
|