61 lines
1.8 KiB
YAML
61 lines
1.8 KiB
YAML
services:
|
|
# multicaster:
|
|
# # TODO: make this more restricitive in the future
|
|
# privileged: true # Grants full access to all devices (for serial access)
|
|
# restart: unless-stopped
|
|
# #ports:
|
|
# # - "5000:5000" # make the multicaster also reachable from the host
|
|
# build:
|
|
# dockerfile: Dockerfile
|
|
# ssh:
|
|
# #- default=~/.ssh/id_ed25519 #lappi
|
|
# - default=~/.ssh/id_rsa #raspi
|
|
# volumes:
|
|
# - "/dev/serial:/dev/serial"
|
|
# #devices:
|
|
# # - /dev/serial/by-id/usb-ZEPHYR_Zephyr_HCI_UART_sample_81BD14B8D71B5662-if00
|
|
# environment:
|
|
# LOG_LEVEL: INFO
|
|
|
|
# network_mode: service:wireguard
|
|
|
|
# command: python ./auracast/multicast_server.py
|
|
# #command: python ./auracast/multicast.py # continously streaming test app
|
|
# #networks:
|
|
# # - default
|
|
|
|
wireguard: # TODO: make all privileges in this compose file as tight as possible
|
|
image: lscr.io/linuxserver/wireguard:latest
|
|
container_name: wireguard
|
|
restart: unless-stopped
|
|
cap_add:
|
|
- NET_ADMIN
|
|
- SYS_MODULE #optional
|
|
environment:
|
|
- PUID=1000
|
|
- PGID=1000
|
|
- TZ=Europe/Vienna
|
|
# - SERVERURL=wireguard.domain.com #optional
|
|
# - SERVERPORT=51820 #optional
|
|
# - PEERS=1 #optional
|
|
# - PEERDNS=auto #optional
|
|
# - INTERNAL_SUBNET=10.13.13.0 #optional
|
|
# - ALLOWEDIPS=0.0.0.0/0 #optional
|
|
# - PERSISTENTKEEPALIVE_PEERS= #optional
|
|
- LOG_CONFS=true #optional
|
|
volumes:
|
|
- ./wg_config:/config
|
|
- /lib/modules:/lib/modules #optional
|
|
ports:
|
|
- 51820:51820/udp # TODO: nececcarry ?
|
|
#- "5000:5000" # make the multicaster also reachable from the host
|
|
|
|
sysctls:
|
|
- net.ipv4.conf.all.src_valid_mark=1
|
|
networks:
|
|
- default
|
|
#- vpn
|
|
# use docker compose up --build --remove-orphans
|
|
|
|
networks:
|
|
vpn: |