docker-compose.yml
services:
wg-easy:
image: ghcr.io/wg-easy/wg-easy:v15.2
container_name: wg-easy
environment:
- LANG=zh
- WG_HOST=vpn.atibm.com # 客户端连接 VPN 依然用这个 IP
- PASSWORD=你的密码
- PUID=1001
- PGID=1001
# - WG_CONFIG_PORT=51821 # 后台默认端口51821
volumes:
- ./data/wireguard:/etc/wireguard
ports:
- "50000:51820/udp" # UDP 隧道端口
networks:
- ghost_net # 加入 Nginx 所在的网络
cap_add:
- NET_ADMIN
- SYS_MODULE
sysctls:
- net.ipv4.ip_forward=1
- net.ipv4.conf.all.src_valid_mark=1
- net.ipv6.conf.all.disable_ipv6=1
- net.ipv6.conf.all.forwarding=0
- net.ipv6.conf.default.forwarding=0
restart: unless-stopped
networks:
ghost_net:
external: true