跳至主要内容

Wireguard 部署应用

 一、首先要有一个公网IP来进行服务端安装配置,为了简化部署,并且尽量少的侵入性,就用Docker安装服务端:


services:

  wireguard:

    restart: always

    image: weejewel/wg-easy

    container_name: wireguard

    ports:

      - "51820:51820/udp"

      - "51821:51821/tcp"

    environment:

      - TZ=Asia/Shanghai

      - WG_HOST=0.0.0.0

      - PASSWORD=123456

      - WG_PERSISTENT_KEEPALIVE=25

      - WG_DEFAULT_ADDRESS=10.0.8.x

      - WG_DEFAULT_DNS=114.114.114.114

      - WG_ALLOWED_IPS=10.0.8.0/24

    volumes:

      - ./wg-easy:/etc/wireguard

    cap_add:

      - NET_ADMIN

      - SYS_MODULE

    sysctls:

      - net.ipv4.ip_forward=1

      - net.ipv4.conf.all.src_valid_mark=1


二、客户端安装:

# root权限


sudo -i


# 安装wireguard软件


apt install wireguard resolvconf -y


# 开启IP转发


echo "net.ipv4.ip_forward = 1" >> /etc/sysctl.conf


sysctl -p


wg-quick up wg0

评论

此博客中的热门博文

Docker-Compose 安装 PolarDB

 version: '3.1' services:   polardb:     container_name: polardb     restart: always     image: polardb/polardb_pg_local_instance     ports:       - 5432:5432     networks:       - net_db     environment:       TZ: Asia/Shanghai     volumes:       - ./polardb:/var/polardb networks:   net_db:     external: true

Docker-Compose 安装 xxl-job-admin

 version: '3' services:  xxl-job-admin:    image: xuxueli/xxl-job-admin:2.3.0    restart: always    container_name: xxl-job-admin    #environment:    #  PARAMS: '--spring.datasource.url= jdbc:mysql://192.168.1.110:3305/xxl_job?useUnicode=true&characterEncoding=UTF-8&autoReconnect=true&serverTimezone=Asia/Shanghai&useSSL=false --spring.datasource.username=root --spring.datasource.password=123456'    ports:      - 80:8080    networks:      - net_db    volumes:      - ./data/applogs:/data/applogs networks:  net_db:    external: true

Docker-Compose 安装 Portainer

 version: '3.1' services: portainer: image: portainer/portainer-ce:latest container_name: portainer hostname: portainer restart: always volumes: - "/var/run/docker.sock:/var/run/docker.sock" - "./portainer_data:/data" - "./portainer_cn:/public" environment: TZ: Asia/Shanghai LANG: en_US.UTF-8 ports: - "9001:9000" networks:      - net_db networks: net_db: external: true