[Unit]
Description=WG Easy
Wants=network-online.target
After=network-online.target

[Container]
Pod=wgeasy.pod
ContainerName=wgeasy
Image=ghcr.io/wg-easy/wg-easy:15.2.2
AutoUpdate=registry

AddCapability=NET_ADMIN
AddCapability=SYS_MODULE
AddCapability=NET_RAW

Sysctl=net.ipv4.ip_forward=1
Sysctl=net.ipv4.conf.all.src_valid_mark=1
Sysctl=net.ipv6.conf.all.disable_ipv6=0
Sysctl=net.ipv6.conf.all.forwarding=1
Sysctl=net.ipv6.conf.default.forwarding=1

# Environment=INSECURE=
EnvironmentFile=/mnt/data/containers/wg-easy/.env.wgeasy

Volume=/mnt/data/containers/wg-easy/wireguard:/etc/wireguard:Z
Volume=/lib/modules:/lib/modules:ro

Label=homepage.group=Misc.
Label=homepage.name=wg-easy
Label=homepage.icon=wireguard.png
Label=homepage.href=https://wgeasy.forest
Label=homepage.description="Wireguard VPN"

[Service]
Restart=always
TimeoutStartSec=90

[Install]
WantedBy=default.target