docs: create guides/wireguard-pihole/wireguard-mit-pihole-einrichten
This commit is contained in:
parent
1db569166c
commit
9dfa4d28c8
1 changed files with 161 additions and 0 deletions
161
guides/wireguard-pihole/wireguard-mit-pihole-einrichten.md
Normal file
161
guides/wireguard-pihole/wireguard-mit-pihole-einrichten.md
Normal file
|
|
@ -0,0 +1,161 @@
|
||||||
|
---
|
||||||
|
title: Anleitung zur Erstellung eines Docker-Containers für wg-easy-extended und Pihole
|
||||||
|
description:
|
||||||
|
published: true
|
||||||
|
date: 2024-02-10T23:33:59.348Z
|
||||||
|
tags:
|
||||||
|
editor: markdown
|
||||||
|
dateCreated: 2024-02-10T23:33:59.348Z
|
||||||
|
---
|
||||||
|
|
||||||
|
# Anleitung zur Erstellung eines Docker-Containers für wg-easy-extended
|
||||||
|
|
||||||
|
## Schritt 1: Docker Compose-Datei erstellen
|
||||||
|
|
||||||
|
Erstellen Sie eine Datei mit dem Namen `docker-compose.yml` und fügen Sie den folgenden Inhalt ein:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
version: "3"
|
||||||
|
|
||||||
|
# More info at https://github.com/pi-hole/docker-pi-hole/ and https://docs.pi-hole.net/
|
||||||
|
services:
|
||||||
|
pihole:
|
||||||
|
container_name: pihole
|
||||||
|
#image: pihole/pihole:latest
|
||||||
|
image: cbcrowe/pihole-unbound:latest
|
||||||
|
# For DHCP it is recommended to remove these ports and instead add: network_mode: "host"
|
||||||
|
ports:
|
||||||
|
- "127.0.0.1:53:53/tcp"
|
||||||
|
- "127.0.0.1:53:53/udp"
|
||||||
|
#- "67:67/udp" # Only required if you are using Pi-hole as your DHCP server
|
||||||
|
#- "127.0.0.1:8084:80/tcp"
|
||||||
|
environment:
|
||||||
|
ServerIP: 10.8.1.3
|
||||||
|
TZ: 'Europe/Berlin'
|
||||||
|
WEBPASSWORD: '${PASSWORT}'
|
||||||
|
REV_SERVER: 'false'
|
||||||
|
DNS1: 127.0.0.1#5335 # Hardcoded to our Unbound server
|
||||||
|
DNS2: 127.0.0.1#5335 # Hardcoded to our Unbound server
|
||||||
|
DNSSEC: 'true' # Enable DNSSEC
|
||||||
|
VIRTUAL_HOST: pihole.${WEBSEITE}
|
||||||
|
VIRTUAL_PORT: 80
|
||||||
|
LETSENCRYPT_HOST: pihole.${WEBSEITE}
|
||||||
|
LETSENCRYPT_EMAIL: admin@${WEBSEITE}
|
||||||
|
|
||||||
|
# Volumes store your data between container upgrades
|
||||||
|
volumes:
|
||||||
|
- './etc-pihole:/etc/pihole'
|
||||||
|
- './etc-dnsmasq.d:/etc/dnsmasq.d'
|
||||||
|
# https://github.com/pi-hole/docker-pi-hole#note-on-capabilities
|
||||||
|
cap_add:
|
||||||
|
- NET_ADMIN # Required if you are using Pi-hole as your DHCP server, else not needed
|
||||||
|
restart: always
|
||||||
|
|
||||||
|
labels:
|
||||||
|
- "com.centurylinklabs.watchtower.enable=true"
|
||||||
|
- flame.type=application
|
||||||
|
- flame.name=Pi-hole
|
||||||
|
- flame.url=https://pihole.${WEBSEITE}/admin/
|
||||||
|
- flame.icon=dns
|
||||||
|
|
||||||
|
networks:
|
||||||
|
proxy:
|
||||||
|
edge-tier:
|
||||||
|
dns:
|
||||||
|
ipv4_address: 172.28.0.2
|
||||||
|
wg-easy:
|
||||||
|
ipv4_address: 10.8.1.3
|
||||||
|
|
||||||
|
wg-easy-extended:
|
||||||
|
container_name: wg-easy-extended
|
||||||
|
environment:
|
||||||
|
WG_HOST: brothertec.eu
|
||||||
|
PASSWORD: ${PASSWORT}
|
||||||
|
#- WG_DEFAULT_DNS=1.1.1.1
|
||||||
|
WG_DEFAULT_DNS: 10.8.1.3
|
||||||
|
WG_DEFAULT_ADDRESS: 10.8.0.x
|
||||||
|
# - WG_MTU=1420
|
||||||
|
WG_PERSISTENT_KEEPALIVE: 25
|
||||||
|
WG_ALLOWED_IPS: 10.8.0.0/24,10.8.1.3
|
||||||
|
WG_POST_UP: >
|
||||||
|
iptables-legacy -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE;
|
||||||
|
iptables-legacy -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth1 -j MASQUERADE;
|
||||||
|
iptables-legacy -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth2 -j MASQUERADE;
|
||||||
|
iptables-legacy -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth3 -j MASQUERADE;
|
||||||
|
iptables-legacy -A INPUT -p udp -m udp --dport 51820 -j ACCEPT;
|
||||||
|
iptables-legacy -A FORWARD -i wg0 -j ACCEPT;
|
||||||
|
iptables-legacy -A FORWARD -o wg0 -j ACCEPT;
|
||||||
|
# - WG_PRE_UP=echo "Pre Up" > /etc/wireguard/pre-up.txt
|
||||||
|
# - WG_POST_UP=echo "Post Up" > /etc/wireguard/post-up.txt
|
||||||
|
# - WG_PRE_DOWN=echo "Pre Down" > /etc/wireguard/pre-down.txt
|
||||||
|
# - WG_POST_DOWN=echo "Post Down" > /etc/wireguard/post-down.txt
|
||||||
|
|
||||||
|
VIRTUAL_HOST: vpn.${WEBSEITE}
|
||||||
|
VIRTUAL_PORT: 51821
|
||||||
|
LETSENCRYPT_HOST: vpn.${WEBSEITE}
|
||||||
|
LETSENCRYPT_EMAIL: admin@${WEBSEITE}
|
||||||
|
volumes:
|
||||||
|
- ./wg-easy:/etc/wireguard
|
||||||
|
ports:
|
||||||
|
- 51820:51820/udp
|
||||||
|
#- 51821:51821/tcp
|
||||||
|
#- 9586:9586/tcp
|
||||||
|
cap_add:
|
||||||
|
- NET_ADMIN
|
||||||
|
- SYS_MODULE
|
||||||
|
sysctls:
|
||||||
|
- net.ipv4.conf.all.src_valid_mark=1
|
||||||
|
- net.ipv4.ip_forward=1
|
||||||
|
restart: unless-stopped
|
||||||
|
image: ghcr.io/tolkonepiu/wg-easy-extended
|
||||||
|
|
||||||
|
networks:
|
||||||
|
proxy:
|
||||||
|
edge-tier:
|
||||||
|
dns:
|
||||||
|
ipv4_address: 172.28.0.3
|
||||||
|
wg-easy:
|
||||||
|
ipv4_address: 10.8.1.2
|
||||||
|
|
||||||
|
labels:
|
||||||
|
- "com.centurylinklabs.watchtower.enable=true"
|
||||||
|
- flame.type=application
|
||||||
|
- flame.name=Wireguard
|
||||||
|
- flame.url=https://vpn.${WEBSEITE}
|
||||||
|
- flame.icon=vpn
|
||||||
|
|
||||||
|
networks:
|
||||||
|
proxy:
|
||||||
|
name: nginx-proxy
|
||||||
|
external: true
|
||||||
|
edge-tier:
|
||||||
|
name: edge
|
||||||
|
external: true
|
||||||
|
dns:
|
||||||
|
name: dns
|
||||||
|
external: true
|
||||||
|
wg-easy:
|
||||||
|
ipam:
|
||||||
|
config:
|
||||||
|
- subnet: 10.8.1.0/24
|
||||||
|
|
||||||
|
|
||||||
|
```
|
||||||
|
|
||||||
|
## Schritt 2: Erstellen des DNS Netzwerkes
|
||||||
|
|
||||||
|
~~~
|
||||||
|
docker network create --driver=bridge --subnet=172.28.0.0/16 dns
|
||||||
|
~~~
|
||||||
|
|
||||||
|
## Schritt 3: Docker-Container starten
|
||||||
|
|
||||||
|
Navigieren Sie im Terminal zum Verzeichnis, in dem sich die `docker-compose.yml`-Datei befindet, und führen Sie den folgenden Befehl aus, um den Docker-Container zu starten:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
docker-compose up -d
|
||||||
|
```
|
||||||
|
|
||||||
|
Der Parameter `-d` startet den Container im Hintergrund.
|
||||||
|
|
||||||
|
Nachdem der Container gestartet wurde, ist Ihr wg-easy-extended-Dienst einsatzbereit.
|
||||||
Loading…
Reference in a new issue