services:
  wireguard:
    image: lscr.io/linuxserver/wireguard:latest
    cap_add:
      - NET_ADMIN
    environment:
      - PUID=1000
      - PGID=100
      - TZ=Europe/Amsterdam
      - SERVERURL=mvl.sh
      - PEERS=worklaptop,phone,desktop,personallaptop
      - ALLOWEDIPS=0.0.0.0/0, ::/0
    volumes:
      - "{{ wireguard_data_dir }}/wg-data:/config"
    ports:
      - 51820:51820/udp
    sysctls:
      - net.ipv4.conf.all.src_valid_mark=1
    restart: unless-stopped