## RUN:: docker compose -p wg-easy --env-file ./WireGuardVPN/wg-easy/env.cfg -f ./WireGuardVPN/wg-easy/stack.yml up -d
services:
  wg-easy:
    image: ${IMAGE_TAG}
    container_name: wg-easy
    environment:
      # [!] 重要：改成你的服务器的公网IP或域名
      - WG_HOST=${WG_HOST}
      # [!] 重要：设置一个强密码来登录Web UI
      - PASSWORD=${WG_PASSWORD}
      # 可选：修改Web UI的端口（容器内是51821，映射到主机可自定义）
      #- WG_PORT=51820
      #- WEB_PORT=51821
    volumes:
      # [!] 关键：将容器内的WireGuard配置目录映射到主机
      - ${Volumes_Path}/data:/etc/wireguard
    ports:
      # 将WireGuard的端口映射到主机（必须与你原来的端口一致，通常是51820）
      - "51820:51820/udp"
      # 将Web UI的端口映射到主机
      - "51821:51821/tcp"
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    sysctls:
      - net.ipv4.ip_forward=1
      - net.ipv6.conf.all.forwarding=1
    restart: unless-stopped