new service wireguard

HAPROXY/haproxy.cfg

@@ -54,10 +54,12 @@ frontend https
     acl is_portainer        hdr(host)   -i portainer.mrhossa.de
     acl is_homarr           hdr(host)   -i homarr.mrhossa.de
     acl is_vaultwarden      hdr(host)   -i vaultwarden.mrhossa.de
+    acl is_wireguard        hdr(host)   -i wireguard.mrhossa.de
 
     http-request deny if    is_jenkins      !is_trusted
     http-request deny if    is_portainer    !is_trusted
     http-request deny if    is_homarr       !is_trusted
+    http-request deny if    is_wireguard    !is_trusted
 
     use_backend web_public       if is_public
     use_backend web_backend      if is_backend
@@ -67,6 +69,7 @@ frontend https
     use_backend web_vaultwarden  if is_vaultwarden
     use_backend web_portainer    if is_portainer
     use_backend web_homarr       if is_homarr
+    use_backend web_wireguard    if is_wireguard
     use_backend stats            if is_stats
 
     default_backend web_public
@@ -97,6 +100,9 @@ backend web_portainer
 backend web_homarr
     server homarr 152.53.159.169:8006 check
 
+backend web_wireguard
+    server wireguard 152.53.159.169:51821 check
+
 backend stats
     stats enable
     stats uri /

JENKINS/jobs/container-restart/config.xml

@@ -30,6 +30,7 @@
             <string>webserver_backend</string>
             <string>gitea</string>
             <string>mariadb</string>
+            <string>wireguard</string>
             <string>haproxy</string>
             <string>all</string>
           </choices>
@@ -54,6 +55,7 @@
                 &apos;webserver_backend&apos;, 
                 &apos;gitea&apos;, 
                 &apos;mariadb&apos;, 
+                &apos;wireguard&apos;,
                 &apos;haproxy&apos;, 
                 &apos;all&apos;
             ], 

docker-compose.yml

@@ -180,6 +180,26 @@ services:
       - "50000:50000"
     restart: always
 
+  wIREGUARD:
+    image: ghcr.io/wg-easy/wg-easy:15
+    container_name: wireguard
+    volumes:
+      - ./WIREGUARD:/etc/wireguard
+      - /lib/modules:/lib/modules:ro
+    cap_add:
+      - NET_ADMIN
+      - SYS_MODULE
+    sysctls:
+      - net.ipv4.ip_forward=1
+      - net.ipv4.conf.all.src_valid_mark=1
+    networks:
+      docker-net:
+        ipv4_address: 172.30.0.20
+    ports:
+      - "51820:51820/udp"
+      - "51821:51821"
+    restart: always
+
 networks:
   docker-net:
     driver: bridge