mkdir -p /opt/wireguard
cd /opt/wireguard
nano docker-compose.yml
version: "3.8"
services:
wg-easy:
environment:
- WG_HOST=192.168.3.128 # 替换为你的服务器公网 IP 或域名
- PASSWORD=qweqwe123 # 替换为 Web 界面登录密码
- WG_DEFAULT_DNS=114.114.114.114 # 可选,设置客户端 DNS
- WG_DEFAULT_ADDRESS=10.8.0.x # 可选,VPN 内部 IP 范围
- WG_ALLOWED_IPS=192.168.67.0/24,192.168.68.0/24
image: weejewel/wg-easy
container_name: wg-easy
volumes:
- ~/.wg-easy:/etc/wireguard
ports:
- "51820:51820/udp" # WireGuard 端口
- "51821:51821/tcp" # Web 界面端口
cap_add:
- NET_ADMIN
- SYS_MODULE
sysctls:
- net.ipv4.ip_forward=1
- net.ipv4.conf.all.src_valid_mark=1
restart: unless-stopped
sudo docker compose up -d
http://<YOUR_SERVER_IP>:51821
客户端下载:https://www.wireguard.com/install/