feat: add WireGuard service deployment and configuration

2025-03-25 15:16:22 +01:00
parent 21c53d6bde
commit 54a7fe64ba
3 changed files with 49 additions and 0 deletions
--- a/config/ansible/tasks/servers/services/wireguard/docker-compose.yml.j2
+++ b/config/ansible/tasks/servers/services/wireguard/docker-compose.yml.j2
@@ -0,0 +1,19 @@
+services:
+  wireguard:
+    image: lscr.io/linuxserver/wireguard:latest
+    cap_add:
+      - NET_ADMIN
+    environment:
+      - PUID=1000
+      - PGID=100
+      - TZ=Europe/Amsterdam
+      - SERVERURL=mvl.sh
+      - PEERS=work-laptop,phone,desktop,personal-laptop
+      - ALLOWEDIPS=0.0.0.0/0, ::/0
+    volumes:
+      - "{{ wireguard_data_dir }}/wg-data:/config"
+    ports:
+      - 51820:51820/udp
+    sysctls:
+      - net.ipv4.conf.all.src_valid_mark=1
+    restart: unless-stopped