e

dnsmasq.conf

@@ -1,15 +0,0 @@
-# DNS-Server für ca-lose VPN-Clients
-# Upstream DNS für externe Anfragen
-server=1.1.1.1
-server=8.8.8.8
-
-# Kein DHCP, nur DNS
-no-dhcp-interface=
-
-# Logging
-log-queries
-
-# Interne Hostnamen
-address=/lose-verkaufen/172.25.0.10
-address=/ca-lose-frontend/172.25.0.10
-address=/ca-lose-backend/172.25.0.11

docker-compose.prod.yml

@@ -4,8 +4,7 @@ services:
     hostname: lose-verkaufen
     build: ./frontend
     networks:
-      ca-lose-internal:
+      - ca-lose-internal
-        ipv4_address: 172.25.0.10
     restart: unless-stopped
 
   backend:
@@ -20,8 +19,7 @@ services:
     depends_on:
       - database
     networks:
-      ca-lose-internal:
+      - ca-lose-internal
-        ipv4_address: 172.25.0.11
     restart: unless-stopped
 
   database:
@@ -38,47 +36,35 @@ services:
     networks:
       - ca-lose-internal
 
-  dns:
-    container_name: ca-lose-dns
-    image: jpillora/dnsmasq
-    restart: unless-stopped
-    volumes:
-      - ./dnsmasq.conf:/etc/dnsmasq.conf:ro
-    networks:
-      ca-lose-internal:
-        ipv4_address: 172.25.0.5
-
   wireguard:
     image: lscr.io/linuxserver/wireguard:latest
-    container_name: ca-lose-wireguard
+    container_name: wireguard
     cap_add:
       - NET_ADMIN
-      - SYS_MODULE
+      - SYS_MODULE #optional
     environment:
       - PUID=1000
       - PGID=1000
-      - TZ=Europe/Berlin
+      - TZ=Etc/UTC
-      - SERVERURL=dus3.the1s.de
+      - SERVERURL=dus3.the1s.de #optional
-      - SERVERPORT=51830
+      - SERVERPORT=51830 #optional
-      - PEERS=2
+      - PEERS=2 #optional
-      - PEERDNS=172.25.0.5
+      - PEERDNS=auto #optional
-      - INTERNAL_SUBNET=10.13.13.0
+      - INTERNAL_SUBNET=10.13.13.0 #optional
-      - ALLOWEDIPS=172.25.0.0/24
+      - ALLOWEDIPS=0.0.0.0/0 #optional
-      - PERSISTENTKEEPALIVE_PEERS=25
+      - PERSISTENTKEEPALIVE_PEERS= #optional
-      - LOG_CONFS=true
+      - LOG_CONFS=true #optional
-      - POST_UP=iptables -t nat -A POSTROUTING -s 10.13.13.0/24 -o eth0 -j MASQUERADE
-      - POST_DOWN=iptables -t nat -D POSTROUTING -s 10.13.13.0/24 -o eth0 -j MASQUERADE
     volumes:
-      - ./wireguard-config:/config
+      - ./config:/config
-      - /lib/modules:/lib/modules
+      - /lib/modules:/lib/modules #optional
     ports:
       - 51830:51830/udp
     sysctls:
       - net.ipv4.conf.all.src_valid_mark=1
     restart: unless-stopped
     networks:
-      - ca-lose-internal
+      ca-lose-internal:
-      - proxynet
+        ipv4_address: 172.25.0.10
 
 volumes:
   ca-lose_mysql:
@@ -90,5 +76,3 @@ networks:
     ipam:
       config:
         - subnet: 172.25.0.0/24
-  proxynet:
-    external: true