homelab/archive/2023.01.bxl-swarm/wireguard.stack.yaml

35 lines
732 B
YAML
Raw Normal View History

2023-01-27 18:20:12 +01:00
version: '3.7'
services:
wireguard:
image: lscr.io/linuxserver/wireguard:latest
deploy:
mode: replicated
replicas: 1
restart_policy:
condition: any
2023-02-03 23:48:45 +01:00
delay: 30s
placement:
constraints:
- node.labels.POWER == true
2023-01-27 18:20:12 +01:00
volumes:
- /mnt/nfs/wireguard:/config
- /lib/modules:/lib/modules
ports:
2023-02-03 23:48:45 +01:00
- 51821:51820/udp
2023-01-27 18:20:12 +01:00
environment:
- TZ=Europe/Paris
- SERVERURL=vpn.bhasher.com
- SERVERPORT=51821
- PEERS=5
- PEERDNS=auto
- INTERNAL_SUBNET=10.13.14.0
- ALLOWEDIPS=0.0.0.0/0
cap_add:
- NET_ADMIN
- SYS_MODULE
sysctls:
- net.ipv4.conf.all.src_valid_mark=1
2023-02-03 23:48:45 +01:00
depends_on:
- system_keepalived
- system_nfs