simono41/docker-wireguard
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
52 commits 1 branch 9 tags 58 KiB
Commit graph

12 commits

Author SHA1 Message Date
Jordan Potter
326b11022f Simplify entrypoint.sh 2023-09-29 16:49:02 -07:00
Jordan Potter
9d36fbae34 Allow specifying multiple local subnets 2022-04-16 19:21:01 -07:00
Jordan Potter
453fa8ab1f Clarify why net.ipv4.conf.all.src_valid_mark not set by WireGuard in entrypoint.sh 2021-06-08 14:43:55 -05:00
Jordan Potter
1c4b408ef7 Clarify how kill switch functions in entrypoint.sh 2021-06-08 14:33:01 -05:00
Jordan Potter
777a5c044e Replace LOCAL_NETWORK with LOCAL_SUBNET 2021-03-08 21:17:41 -06:00
Jordan Potter
6f7a3426dd Add log statement when LOCAL_NETWORK specified 2021-03-06 22:48:51 -06:00
Jordan Potter
42edf25751 Add support for LOCAL_NETWORK environment variable 2021-03-06 22:19:44 -06:00
Jordan Potter
123557b6bb
Merge pull request #4 from bobbypage/ipv6 
Only set ipv6 killswitch if ipv6 interface exists
 2020-09-12 20:59:54 -05:00
bobbypage
c563bc848e Only set ipv6 killswitch if ipv6 interface exists 2020-09-13 01:54:04 +00:00
bobbypage
5e16644902 Remove need for running in privileged mode 
To remove the need for running privileged mode, set the necessary
`net.ipv4.conf.all.src_valid_mark=1` sysctl via docker and modify the
`/usr/bin/wg-quick` script from setting the sysctl

* Set `net.ipv4.conf.all.src_valid_mark=1` sysctl via docker `--sysctl`

* Set CAPs of NET_ADMIN and SYS_MODULE instead of using `--privileged`

* Check that `net.ipv4.conf.all.src_valid_mark=1` is set in entrypoint
  script

Fixes #2
 2020-09-13 01:16:45 +00:00
Jordan Potter
8cdbdd9bab Add killswitch 2019-05-12 22:21:16 -07:00
Jordan Potter
3d28131872 Add Dockerfile and entrypoint script 2019-02-14 12:03:36 -08:00