dcebf21e03
- Add wg0 interface cleanup before startup (prevents 'already exists' crash) - Always regenerate wg0.conf to pick up key changes - Remove obsolete 'version' from docker-compose files - Fix read-only /proc/sys writes (host-level ip_forward already set)
35 lines
1.2 KiB
YAML
35 lines
1.2 KiB
YAML
# =============================================================================
|
|
# docker-compose.client.yml — Клиент (домашний сервер / Raspberry Pi за NAT)
|
|
# Запуск: docker compose -f docker-compose.client.yml up -d
|
|
# =============================================================================
|
|
|
|
services:
|
|
wireguard-client:
|
|
image: git.softuniq.eu/opendoor/wireguard-vps-tunnel-client:latest
|
|
build:
|
|
context: ./client
|
|
platforms:
|
|
- linux/amd64
|
|
- linux/arm64
|
|
container_name: wireguard-client
|
|
restart: unless-stopped
|
|
cap_add:
|
|
- NET_ADMIN
|
|
- SYS_MODULE
|
|
network_mode: host
|
|
volumes:
|
|
- ./config:/etc/wireguard
|
|
- /lib/modules:/lib/modules:ro
|
|
environment:
|
|
- CLIENT_WG_IP=${CLIENT_WG_IP:-10.0.0.2}
|
|
- VPS_PUBLIC_IP=${VPS_PUBLIC_IP:?Укажите VPS_PUBLIC_IP в .env}
|
|
- VPS_WG_PORT=${VPS_WG_PORT:-51820}
|
|
- SERVER_PUBLIC_KEY=${SERVER_PUBLIC_KEY:?Укажите SERVER_PUBLIC_KEY в .env}
|
|
- SERVER_WG_IP=${SERVER_WG_IP:-10.0.0.1}
|
|
- PERSISTENT_KEEPALIVE=${PERSISTENT_KEEPALIVE:-21}
|
|
healthcheck:
|
|
test: ["CMD", "/healthcheck.sh"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 10s |