wg-easy
Example
{config, ...}: {
wg-easy = {
enable = true;
adminPasswordFile = config.sops.secrets."wg-easy/admin_password".path;
extraEnv = {
DISABLE_IPV6 = true;
};
};
}Stack Options
nps.stacks.wg-easy.adminPasswordFile
Path to the file containing the admin password.
Only has an effect during initial setup. See https://wg-easy.github.io/wg-easy/latest/advanced/config/unattended-setup/
nps.stacks.wg-easy.adminUsername
Admin username.
Only has an effect during initial setup. See https://wg-easy.github.io/wg-easy/latest/advanced/config/unattended-setup/
nps.stacks.wg-easy.containers.wg-easy
Alias of {option}services.podman.containers.wg-easy.
nps.stacks.wg-easy.enable
Whether to enable wg-easy.
nps.stacks.wg-easy.extraEnv
Extra environment variables to set for the container. Variables can be either set directly or sourced from a file (e.g. for secrets).
See https://wg-easy.github.io/wg-easy/latest/advanced/config/unattended-setup/
attribute set of (null or boolean or signed integer or string or absolute path or (submodule))
{ }
{
INIT_DNS = "1.1.1.1";
}
nps.stacks.wg-easy.host
The external domain or IP address of the Wireguard server. Will be used as the 'endpoint' when generating client configurations.
Only has an effect during initial setup. See https://wg-easy.github.io/wg-easy/latest/advanced/config/unattended-setup/
string
"vpn.${config.nps.stacks.traefik.domain}"
nps.stacks.wg-easy.port
The port on which the Wireguard server will listen. Will be passed as INIT_PORT during initial setup.
Only has an effect during initial setup. See https://wg-easy.github.io/wg-easy/latest/advanced/config/unattended-setup/
16 bit unsigned integer; between 0 and 65535 (both inclusive)
51820