scoot
c13bcb3efa
- Replace raspen references with heron in AGENTS.md - Update nginx config for live domains (qmoln.se) - Switch SSL certs to Let's Encrypt paths - Update WireGuard config with heron's keys and passive listen - WireGuard direction: agge connects out to heron - Remove old ssl volume mount, mount /etc/letsencrypt instead
32 lines
735 B
YAML
32 lines
735 B
YAML
services:
|
|
wireguard:
|
|
image: linuxserver/wireguard
|
|
cap_add:
|
|
- NET_ADMIN
|
|
- NET_RAW
|
|
- SYS_MODULE
|
|
sysctls:
|
|
net.ipv4.conf.all.src_valid_mark: "1"
|
|
volumes:
|
|
- ./wireguard:/config
|
|
ports:
|
|
- "80:80"
|
|
- "443:443"
|
|
- "5432:5432"
|
|
- "2222:2222"
|
|
- "51820:51820/udp"
|
|
restart: unless-stopped
|
|
|
|
nginx:
|
|
image: nginx:alpine
|
|
network_mode: "service:wireguard"
|
|
depends_on:
|
|
- wireguard
|
|
volumes:
|
|
- ./nginx/nginx.conf:/etc/nginx/nginx.conf:ro
|
|
- ./nginx/conf.d:/etc/nginx/conf.d:ro
|
|
- ./nginx/stream.d:/etc/nginx/stream.d:ro
|
|
- /etc/letsencrypt:/etc/letsencrypt:ro
|
|
- ./html:/usr/share/nginx/html:ro
|
|
restart: unless-stopped
|