add watchtower

2025-11-29 16:09:49 +00:00 · 2025-10-25 13:27:43 +00:00
parent 905fa852a5
commit 57f4fbe9f3
15 changed files with 305 additions and 258 deletions
--- a/wg_easy/docker-compose.yml
+++ b/wg_easy/docker-compose.yml
@@ -1,43 +1,45 @@
 services:
-    wg-easy:
-        image: ghcr.io/wg-easy/wg-easy:15
-        container_name: wg-easy
-        networks:
-            caddy:
-                interface_name: wgeth1
-            wg:
-                ipv4_address: 10.42.42.42
-                ipv6_address: fdcc:ad94:bacf:61a3::2a
-                interface_name: wgeth0
-        environment:
-            WG_DEVICE: wgeth0
-        volumes:
-            - ./data:/etc/wireguard
-            - /lib/modules:/lib/modules:ro
-        ports:
-            - "51820:51820/udp"
-            # - "51821:51821/tcp"
-        restart: unless-stopped
-        cap_add:
-            - NET_ADMIN
-            - SYS_MODULE
-        sysctls:
-            - net.ipv4.ip_forward=1
-            - net.ipv4.conf.all.src_valid_mark=1
-            - net.ipv6.conf.all.disable_ipv6=0
-            - net.ipv6.conf.all.forwarding=1
-            - net.ipv6.conf.default.forwarding=1
+  wg-easy:
+    image: ghcr.io/wg-easy/wg-easy:15
+    container_name: wg-easy
+    labels:
+      - "com.centurylinklabs.watchtower.enable=true"
+    networks:
+      caddy:
+        interface_name: wgeth1
+      wg:
+        ipv4_address: 10.42.42.42
+        ipv6_address: fdcc:ad94:bacf:61a3::2a
+        interface_name: wgeth0
+    environment:
+      WG_DEVICE: wgeth0
+    volumes:
+      - ./data:/etc/wireguard
+      - /lib/modules:/lib/modules:ro
+    ports:
+      - "51820:51820/udp"
+      # - "51821:51821/tcp"
+    restart: unless-stopped
+    cap_add:
+      - NET_ADMIN
+      - SYS_MODULE
+    sysctls:
+      - net.ipv4.ip_forward=1
+      - net.ipv4.conf.all.src_valid_mark=1
+      - net.ipv6.conf.all.disable_ipv6=0
+      - net.ipv6.conf.all.forwarding=1
+      - net.ipv6.conf.default.forwarding=1

 networks:
-    caddy:
-        name: caddy
-        driver: bridge
-        external: true
-    wg:
-        driver: bridge
-        enable_ipv6: true
-        ipam:
-            driver: default
-            config:
-                - subnet: 10.42.42.0/24
-                - subnet: fdcc:ad94:bacf:61a3::/64
+  caddy:
+    name: caddy
+    driver: bridge
+    external: true
+  wg:
+    driver: bridge
+    enable_ipv6: true
+    ipam:
+      driver: default
+      config:
+        - subnet: 10.42.42.0/24
+        - subnet: fdcc:ad94:bacf:61a3::/64