safebox/wireguard-proxy-client
7
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Added new service files to repository

Browse Source
This commit is contained in:
Gyorgy Berenyi
2023-04-27 09:29:29 +00:00
parent 6c11c45756
commit 09d4a254b7
8 changed files with 217 additions and 154 deletions
Download Patch File Download Diff File Expand all files Collapse all files

70
firewall-vpn-proxy-postrouting.json Normal file
View File

@@ -0,0 +1,70 @@
{
"main": {
"SERVICE_NAME": "firewalls",
"DOMAIN": "null"
},
"containers": [
{
"IMAGE": "registry.format.hu/firewall",
"UPDATE": "true",
"NAME": "firewall",
"SCALE": "0",
"MEMORY": "64M",
"NETWORK": "host",
"VOLUMES": [
{
"SOURCE": "/proc/",
"DEST": "/proc/",
"TYPE": "rw"
},
{
"SOURCE": "/run/",
"DEST": "/run/",
"TYPE": "rw"
},
{
"SOURCE": "/etc/user/config/services",
"DEST": "/services",
"TYPE": "ro"
},
{
"SOURCE": "/var/run/docker.sock",
"DEST": "/var/run/docker.sock",
"TYPE": "rw"
},
{
"SOURCE": "/usr/bin/docker",
"DEST": "/usr/bin/docker",
"TYPE": "ro"
},
{
"SOURCE": "/etc/system/data/dns/hosts.local",
"DEST": "/etc/dns/hosts.local",
"TYPE": "ro"
}
],
"PORTS": [ ],
"READYNESS": [
{"tcp": ""},
{"HTTP": ""},
{"EXEC": "/ready.sh"}
],
"ENVS": [
{ "NSENTER": "true" },
{ "POSTROUTING": "true" },
{ "NAME": "NAME", "VALUE": "wireguardproxy" },
{ "TARGET": "smarthostloadbalancer" },
{ "TYPE": "tcp" },
{ "TARGET_PORT_1": "80" },
{ "TARGET_PORT_2": "443" },
{ "COMMENT": "client" }
],
"EXTRA": "--privileged --rm",
"DEPEND": "null",
"START_ON_BOOT": "false",
"CMD": "null",
"PRE_START": "null",
"POST_START": "null"
}
]
}

74
firewall-vpn-proxy-prerouting.json Normal file
View File

@@ -0,0 +1,74 @@
{
"main": {
"SERVICE_NAME": "firewalls",
"DOMAIN": "null"
},
"containers": [
{
"IMAGE": "registry.format.hu/firewall",
"UPDATE": "true",
"NAME": "wireguardfirewall",
"SCALE": "0",
"MEMORY": "64M",
"NETWORK": "host",
"VOLUMES": [
{
"SOURCE": "/proc/",
"DEST": "/proc/",
"TYPE": "rw"
},
{
"SOURCE": "/run/",
"DEST": "/run/",
"TYPE": "rw"
},
{
"SOURCE": "/etc/user/config/services",
"DEST": "/services",
"TYPE": "ro"
},
{
"SOURCE": "/var/run/docker.sock",
"DEST": "/var/run/docker.sock",
"TYPE": "rw"
},
{
"SOURCE": "/usr/bin/docker",
"DEST": "/usr/bin/docker",
"TYPE": "ro"
},
{
"SOURCE": "/etc/system/data/dns/hosts.local",
"DEST": "/etc/dns/hosts.local",
"TYPE": "ro"
}
],
"PORTS": [ ],
"READYNESS": [
{"tcp": ""},
{"HTTP": ""},
{"EXEC": "/ready.sh"}
],
"ENVS": [
{ "NSENTER": "true" },
{ "PREROUTING": "true" },
{ "SOURCE_IFACE": "wg0" },
{ "TARGET": "smarthostloadbalancer" },
{ "NAME": "NAME", "VALUE": "wireguardproxy" },
{ "TYPE": "tcp" },
{ "SOURCE_PORT_1": "80" },
{ "SOURCE_PORT_2": "443" },
{ "TARGET_PORT_1": "80" },
{ "TARGET_PORT_2": "443" },
{ "COMMENT": "client" }
],
"ENV_FILES": [ "/etc/user/config/user.json" ],
"EXTRA": "--privileged --rm",
"DEPEND": "null",
"START_ON_BOOT": "false",
"CMD": "null",
"PRE_START": "null",
"POST_START": "null"
}
]
}

64
firewall-vpn-smarthost-loadbalancer.json Normal file
View File

@@ -0,0 +1,64 @@
{
"main": {
"SERVICE_NAME": "firewalls",
"DOMAIN": "null"
},
"containers": [
{
"IMAGE": "registry.format.hu/firewall",
"UPDATE": "true",
"NAME": "firewall",
"MEMORY": "64M",
"NETWORK": "host",
"SCALE": "0",
"VOLUMES": [
{
"SOURCE": "/run/",
"DEST": "/run/",
"TYPE": "rw"
},
{
"SOURCE": "/etc/user/config/services",
"DEST": "/services",
"TYPE": "ro"
},
{
"SOURCE": "/etc/system/data/dns/hosts.local",
"DEST": "/etc/dns/hosts.local",
"TYPE": "ro"
},
{
"SOURCE": "/var/run/docker.sock",
"DEST": "/var/run/docker.sock",
"TYPE": "rw"
},
{
"SOURCE": "/usr/bin/docker",
"DEST": "/usr/bin/docker",
"TYPE": "ro"
}
],
"PORTS": [ ],
"READYNESS": [
{"tcp": ""},
{"HTTP": ""},
{"EXEC": "/ready.sh"}
],
"ENVS": [
{ "CHAIN": "DOCKER-USER" },
{ "SOURCE": "proxyvpnclient" },
{ "TARGET": "smarthostloadbalancer" },
{ "TYPE": "tcp" },
{ "TARGET_PORT_1": "80" },
{ "TARGET_PORT_2": "443" },
{ "COMMENT": "vpn access smarthost loadbalancer" }
],
"EXTRA": "--privileged --rm",
"DEPEND": "null",
"START_ON_BOOT": "false",
"CMD": "null",
"PRE_START": "null",
"POST_START": "null"
}
]
}

55
firewall_loadbalancer_wireguard_postrouting-27dhuwdh.json
View File

@@ -1,55 +0,0 @@
{
"main": {
"SERVICE_NAME": "firewalls",
"DOMAIN": "null"
},
"containers": [
{
"IMAGE": "registry.format.hu/firewall",
"NAME": "firewall_loadbalancer_wireguard_postrouting-27dhuwdh",
"MEMORY": "64M",
"IP": "null",
"NETWORK": "host",
"VOLUMES": [
{
"SOURCE": "/var/run/docker.sock",
"DEST": "/var/run/docker.sock",
"TYPE": "rw"
},
{
"SOURCE": "/usr/bin/docker",
"DEST": "/usr/bin/docker",
"TYPE": "ro"
},
{
"SOURCE": "/run/",
"DEST": "/run/",
"TYPE": "rw"
},
{
"SOURCE": "/proc/",
"DEST": "/proc/",
"TYPE": "ro"
},
{
"SOURCE": "/etc/user/config/services",
"DEST": "/services",
"TYPE": "ro"
}
],
"PORTS": [ ],
"READYNESS": [
{"tcp": ""},
{"HTTP": ""},
{"EXEC": "/ready.sh"}
],
"ENV_FILES": [ "/etc/system/config/proxy.json" ],
"EXTRA": "--privileged",
"DEPEND": "null",
"START_ON_BOOT": "false",
"CMD": "null",
"PRE_START": "null",
"POST_START": "null"
}
]
}

55
firewall_loadbalancer_wireguard_prerouting-27dhuwdh.json
View File

@@ -1,55 +0,0 @@
{
"main": {
"SERVICE_NAME": "firewalls",
"DOMAIN": "null"
},
"containers": [
{
"IMAGE": "registry.format.hu/firewall",
"NAME": "firewall_loadbalancer_wireguard_prerouting-27dhuwdh",
"MEMORY": "64M",
"IP": "null",
"NETWORK": "host",
"VOLUMES": [
{
"SOURCE": "/var/run/docker.sock",
"DEST": "/var/run/docker.sock",
"TYPE": "rw"
},
{
"SOURCE": "/usr/bin/docker",
"DEST": "/usr/bin/docker",
"TYPE": "ro"
},
{
"SOURCE": "/run/",
"DEST": "/run/",
"TYPE": "rw"
},
{
"SOURCE": "/proc/",
"DEST": "/proc/",
"TYPE": "ro"
},
{
"SOURCE": "/etc/user/config/services",
"DEST": "/services",
"TYPE": "ro"
}
],
"PORTS": [ ],
"READYNESS": [
{"tcp": ""},
{"HTTP": ""},
{"EXEC": "/ready.sh"}
],
"ENV_FILES": [ "/etc/user/config/user.json", "/etc/system/config/proxy.json" ],
"EXTRA": "--privileged",
"DEPEND": "null",
"START_ON_BOOT": "false",
"CMD": "null",
"PRE_START": "null",
"POST_START": "null"
}
]
}

24
proxy.json
View File

@@ -1,24 +0,0 @@
{
"firewall_loadbalancer_wireguard_prerouting": {
"NAME": "wireguard_proxy_client",
"PREROUTING": "true",
"TARGET_IP": "172.18.100.2",
"TYPE": "tcp",
"SOURCE_PORT_1": "80",
"SOURCE_PORT_2": "443",
"TARGET_PORT_1": "80",
"TARGET_PORT_2": "443",
"COMMENT": "edeg3e98"
},
"firewall_loadbalancer_wireguard_postrouting": {
"NAME": "wireguard_proxy_client",
"POSTROUTING": "true",
"TARGET_IP": "172.18.100.0",
"TARGET_PORT_1": "80",
"TARGET_PORT_2": "443",
"TYPE": "tcp",
"COMMENT": "edeg3e98"
}
}

6
user.json
View File

@@ -1,6 +0,0 @@
{
},
"firewall_loadbalancer_wireguard_prerouting": {
"SOURCE_IP": "10.0.1.1"
}
}

23
wireguard-proxy-client.json → vpn-proxy.json
View File

@@ -3,22 +3,13 @@
"SERVICE_NAME": "wireguard-client",
"DOMAIN": "null"
},
"networks": [
{
"NAME": "wireguard-proxy-client",
"DRIVER": "bridge",
"SUBNET": "172.16.0.0/24",
"RANGE": "172.16.0.0/24",
"GATEWAY": "172.16.0.1"
}
],
"containers": [
{
"IMAGE": "registry.format.hu/wireguard-server",
"NAME": "wireguard_proxy_client-edeg3e98",
"IMAGE": "registry.format.hu/wireguard-client",
"UPDATE": "true",
"NAME": "wireguardproxy-client",
"MEMORY": "64M",
"IP": "172.16.0.2",
"NETWORK": "wireguard-proxy-client",
"SELECTOR": "proxyvpnclient",
"VOLUMES": [
{
"SOURCE": "/etc/user/secret/wireguard-client/wg0.conf",
@@ -38,7 +29,11 @@
"START_ON_BOOT": "true",
"CMD": "null",
"PRE_START": "null",
"POST_START": [ "firewall_loadbalancer_wireguard_prerouting-27dhuwdh", "firewall_loadbalancer_wireguard_postrouting-27dhuwdh" ]
"POST_START": [ "firewall-vpn-smarthost-loadbalancer",
"firewall-vpn-proxy-postrouting",
"firewall-vpn-proxy-prerouting"
]
}
]
}