wg-easy/README.md
Emile Nijssen e3b7d94fa0 wip
2021-05-23 12:25:14 +02:00

35 lines
1.2 KiB
Markdown

# WireGuard Easy
## Usage
```bash
$ docker run \
--name wg-easy \
--mount type=bind,source=~/.wg-easy,target=/etc/wireguard \
--cap-add=NET_ADMIN \
--cap-add=SYS_MODULE \
--sysctl="net.ipv4.conf.all.src_valid_mark=1" \
--restart=unless-stopped \
-p 51820:51820/udp \
-p 51821:51821/tcp \
weejewel/wg-easy
```
The Web UI will be available on `http://0.0.0.0:51821`. By default, it doesn't require a password.
> Configuration files will be stored in `~/.wg-easy/` on your host.
## Options
Set options by appending them to the `docker run` command. For example, add `--env PASSWORD=foobar123` to set a password.
| Env | Default | Example | Description |
| - | - | - | - |
| `WG_HOST` | - | `vpn.myserver.com` | The public hostname of your VPN server |
| `WG_PORT` | `51820` | `51820` | The public UDP port of your VPN server |
| `PASSWORD` | - | `foobar123` | When set, requires a password when logging in to the Web UI. |
| `WG_DEFAULT_ADDRESS` | `10.8.0.x` | `10.6.0.x` | Clients IP address range |
| `WG_DEFAULT_DNS` | `1.1.1.1` | `8.8.8.8, 8.8.4.4` | DNS server clients will use |
> If you change `WG_PORT`, make sure to also change the exposed port in the `docker run` command.