testing

compose.yml

@@ -10,7 +10,7 @@ services:
       - "80:80"
       - "443:443"
     volumes:
-      - "/var/run/docker.sock:/var/run/docker.sock"
+      - "/var/run/docker.sock:/var/run/docker.sock" # running as root TODO need to make new user
       - "./letsencrypt:/letsencrypt"
       - "./traefik.yml:/etc/traefik/traefik.yml:ro" # sets the traefik.yml file as the options file for configuring proxy settings
     networks:

traefik.yml

@@ -23,6 +23,8 @@ entryPoints:
           scheme: https
   websecure:
     address: ":443"
+  # defenk-only:
+  #   address: ":80"
 
 certificatesResolvers:
   basic:

wg-easy/compose.yml

@@ -1,40 +0,0 @@
-services:
-  wg-easy:
-    image: ghcr.io/wg-easy/wg-easy
-    container_name: wg-easy
-    restart: unless-stopped
-    volumes:
-      - ./etc_wireguard:/etc/wireguard
-    environment:
-      # Required settings
-      - WG_HOST=wg.riverrooks.dev
-      
-      # Optional settings
-      - WG_PORT=51820                 # WireGuard UDP port
-      - WG_DEFAULT_DNS=1.1.1.1
-      - WG_ALLOWED_IPS=10.8.0.0/24
-      
-    cap_add:
-      - NET_ADMIN
-      - SYS_MODULE
-    sysctls:
-      - net.ipv4.conf.all.src_valid_mark=1
-      - net.ipv4.ip_forward=1
-
-    # Ports: We map the VPN port (UDP) directly to the host.
-    # The Web UI (51821) is handled by Traefik labels instead.
-    ports:
-      - "51820:51820/udp"
-
-    networks:
-      - traefik
-
-    labels:
-        - "traefik.enable=true"
-        - "traefik.http.routers.wg-easy.rule=Host(`wg.riverrooks.dev`)"
-        - "traefik.http.routers.wg-easy.entrypoints=websecure"
-        - "traefik.http.routers.wg-easy.tls.certresolver=myresolver"
-        - "traefik.http.services.wg-easy.loadbalancer.server.port=51821"
-networks:
-  traefik:
-    external: true

whoami.yml

@@ -1,7 +1,8 @@
+# whoami.yml works as a nice tester to check if the network is exposed
 services:
   whoami:
       image: traefik/whoami
-      container_name: whoami
+      container_name: whoami-public
       restart: unless-stopped
       labels:
         - "traefik.enable=true"
@@ -10,6 +11,17 @@ services:
         - "traefik.http.routers.whoami.tls.certresolver=basic"
       networks:
         - traefik
+  whoami-defenk:
+      image: traefik/whoami
+      container_name: whoami-vpn
+      restart: unless-stopped
+      # labels:
+        # - "traefik.enable=true"
+        # - "traefik.http.routers.whoami.rule=Host(`10.8.0.1`)"
+        # - "traefik.http.routers.whoami.entrypoints=websecure"
+        # # - "traefik.http.routers.whoami.tls.certresolver=basic"
+      networks:
+        - traefik
 
 networks:
   traefik: