feat: wireguard

servers/link/docker-compose.d/custom/nginx/conf.d/default.conf

@@ -2,16 +2,8 @@ server {
     listen 80;
     server_name link.ixvd.net;
 
-    # SSL is managed by certbot, no need for a ssl listen; it will be generated automagically!
-
-    # default html page
     location / {
-        root /usr/share/nginx/html;
-        index index.html index.htm;
+        proxy_pass http://wireguard:5000;
     }
 
-    error_page   500 502 503 504  /50x.html;
-    location = /50x.html {
-        root /usr/share/nginx/html;
-    }
 }

servers/link/docker-compose.d/docker-compose.wireguard.yml

@@ -0,0 +1,38 @@
+version: '2.2'
+
+services:
+  wireguard:
+    image: linuxserver/wireguard:latest
+    container_name: wireguard
+    cap_add:
+      - NET_ADMIN
+    volumes:
+      - /srv/wg/config:/config
+    ports:
+      - "51820:51820/udp"
+    networks:
+      - proxy
+      - internal
+    restart: unless-stopped
+
+  wireguard-ui:
+    image: ngoduykhanh/wireguard-ui:latest
+    container_name: wireguard-ui
+    depends_on:
+      - wireguard
+    cap_add:
+      - NET_ADMIN
+    network_mode: service:wireguard
+    env_file:
+      - /etc/ixvd/secrets/env/wg-ui.env
+    environment:
+      - WGUI_MANAGE_START=true
+      - WGUI_MANAGE_RESTART=true
+    restart: unless-stopped
+    logging:
+      driver: json-file
+      options:
+        max-size: 50m
+    volumes:
+      - /srv/wg/other/ui-db:/app/db
+      - /srv/wg/config:/etc/wireguard