[开源]WireGuard VPN docker compose 设定-58码农网

[WireGuard VPN Server 完整教学] 教你如何架设属于自己的VPN伺服器
如果要安装 WireGuard 最简单方式便是使用 docker compose
步骤1:
準备 docker-compose.yml 有?您需要依个人环境修改

version: "3.8"services:  wg-easy:    environment:      # ⚠️ Required:      # Change this to your host's public address      - WG_HOST=?你的伺服器IP       # Optional:      - PASSWORD=?你的管理界面密码      - WG_PORT=51820           - WG_DEFAULT_DNS=8.8.8.8,8.8.4.4,1.1.1.1      - WG_MTU=1420      - WG_ALLOWED_IPS=192.168.0.0/24, 10.0.1.0/24      - WG_PRE_UP=echo "Pre Up" > /etc/wireguard/pre-up.txt      - WG_POST_UP=echo "Post Up" > /etc/wireguard/post-up.txt      - WG_PRE_DOWN=echo "Pre Down" > /etc/wireguard/pre-down.txt      - WG_POST_DOWN=echo "Post Down" > /etc/wireguard/post-down.txt          image: weejewel/wg-easy    container_name: wg-easy    volumes:      - .:/etc/wireguard ?对应你下指令的目录     ports:      - "51820:51820/udp"      - "51821:51821/tcp"    restart: unless-stopped    cap_add:      - NET_ADMIN      - SYS_MODULE    sysctls:      - net.ipv4.ip_forward=1      - net.ipv4.conf.all.src_valid_mark=1

步骤2:
执行 docker-compose.yml

docker-compose up -d

重装

#先执行docker-compose down#再执行docker-compose up -d

步骤3:
设定网域 https:
利用 home assistant 的 ssl proxy 到 WireGuard
WireGuard proxy设定如下:

https://xxxx.hopto.org:xxxx {tls /ssl/certificate.pem /ssl/private.key {alpn http/1.1}proxy / 192.168.0.xxx:51821 {transparentwebsocket}log stdouterrors stderr }

步骤4:设定路由器授予 tcp udp 权限如下: