From 81ee3b8aa34241e22cbcc1b6c21f9fdc69223fe3 Mon Sep 17 00:00:00 2001
From: Aykhan Shahsuvarov <aykhan.shahs@gmail.com>
Date: Thu, 15 Oct 2026 17:31:18 +0000
Subject: [PATCH] wg_easy: switch to AmneziaWG and hand out IPv4-only configs

---
 wg_easy/docker-compose.yaml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/wg_easy/docker-compose.yaml b/wg_easy/docker-compose.yaml
index 2f1cbe4..0998194 100644
--- a/wg_easy/docker-compose.yaml
+++ b/wg_easy/docker-compose.yaml
@@ -23,6 +23,11 @@ services:
         interface_name: wgeth0
     environment:
       WG_DEVICE: wgeth0
+      EXPERIMENTAL_AWG: "true"
+      # NixOS has no /lib/modules, so the modinfo-based auto-detect fails; the
+      # amneziawg module is loaded on the host (nix-config boot.kernelModules).
+      OVERRIDE_AUTO_AWG: awg
+      DISABLE_IPV6: "true"
     volumes:
       - ./data:/etc/wireguard
       - /lib/modules:/lib/modules:ro
@@ -30,6 +35,11 @@ services:
       - "51820:51820/udp"
       # - "51821:51821/tcp"
     restart: unless-stopped
+    healthcheck:
+      test: ["CMD-SHELL", "timeout 5s sh -c \"awg show | grep -q interface\""]
+      interval: 60s
+      timeout: 5s
+      retries: 3
     cap_add:
       - NET_ADMIN
       - SYS_MODULE