services:
  wireguard-service:
    image: linuxserver/wireguard:1.0.20250521
    container_name: wireguard-service
    restart: unless-stopped
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    environment:
      PUID: 1000
      PGID: 1000
      TZ: "Etc/UTC"
      SERVERURL: "www.hlsq.asia"
      SERVERPORT: "51820"
      PEERS: 2
      PEERDNS: "auto"
      INTERNAL_SUBNET: "192.168.30.0"
      ALLOWEDIPS: "0.0.0.0/0"
    volumes:
      - ./wireguard-service:/config
      - /lib/modules:/lib/modules:ro
    ports:
      - "51820:51820/udp"
    sysctls:
      - net.ipv4.ip_forward=1
      - net.ipv4.conf.all.src_valid_mark=1

  wireguard-client:
    image: linuxserver/wireguard:1.0.20250521
    container_name: wireguard-client
    restart: unless-stopped
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    environment:
      PUID: 1000
      PGID: 1000
      TZ: "Etc/UTC"
      CLIENT: 1
      CONFIG_FILE: "/config/wg_confs/peer1.conf"
    volumes:
      - ./wireguard-client:/config
      - /lib/modules:/lib/modules:ro
    sysctls:
      - net.ipv4.ip_forward=1
      - net.ipv4.conf.all.src_valid_mark=1