docker-compose.yaml

services:
  wireguard:
    image: linuxserver/wireguard
    container_name: wireguard
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Zurich
      - SERVERURL=$PROXY_SERVER_PUBLIC_URL #optional
      - SERVERPORT=51820 #optional
      - PEERS=0 #optional
      - PEERDNS=auto #optional
      - INTERNAL_SUBNET=10.13.13.0 #optional
      - ALLOWEDIPS=0.0.0.0/0 #optional
      - PERSISTENTKEEPALIVE_PEERS= #optional
      - LOG_CONFS=true #optional
    volumes:
      - ./volumes/wireguard/data:/config
    ports:
      # proxy HTTPS port
      - $PROXY_PUBLIC_PORT:$PROXY_PORT
      # wireguard port
      - 51820:51820/udp
    sysctls:
      - net.ipv4.conf.all.src_valid_mark=1
    restart: unless-stopped
    networks:
      omnia-proxy-network:
        ipv4_address: 172.19.0.2

  proxy-rs:
    profiles: ["tests", "prod"]
    build:
      context: ./
      dockerfile: Dockerfile
    image: omnia/proxy-rs
    container_name: proxy-rs
    depends_on:
      - wireguard
    restart: unless-stopped
    environment:
      - ENV=$ENV
      - WIREGUARD_CONTAINER_NAME=wireguard
      # the ip assigned to wireguard container, since proxy is attached to its network
      # the port specified here is the HTTP port exposed by the proxy, to be used by peers in the wireguard network
      - PROXY_INTERNAL_ADDRESS=172.19.0.2:8081
      - ENABLE_HTTPS=$ENABLE_HTTPS
      - HTTPS_CERT_PATH=$HTTPS_CERT_PATH
      - HTTPS_KEY_PATH=$HTTPS_KEY_PATH
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - ./volumes/proxy-rs/data:/proxy/data
      - ./volumes/proxy-rs/certs:/proxy/certs
    network_mode: service:wireguard

networks:
  omnia-proxy-network:
    name: omnia-proxy-network
    ipam:
      driver: default
      config:
        - subnet: 172.19.0.0/16