version: '3.8'
services:
  wireadmin:
    environment:
      # ⚠️ Required:
      # Make sure change this to your host's public address
      - WG_HOST=localhost
      # ⚠️ Required:
      # You can use `openssl rand -base64 8` to generate a secure password
      - UI_PASSWORD=super-secret-password

    image: wireadmin
    container_name: wireadmin
    restart: unless-stopped
    volumes:
      - persist-data:/data
    ports:
      - '51820:51820/udp'
      - '3000:3000/tcp'
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    sysctls:
      - net.ipv4.ip_forward=1
      - net.ipv4.conf.all.src_valid_mark=1

volumes:
  persist-data:
    driver: local