init commit

2026-07-18 10:02:43 +03:00
commit 3b4a1f5388
31 changed files with 6580 additions and 0 deletions
@@ -0,0 +1,39 @@
+services:
+  awg-profiler-mint:
+    build:
+      context: .
+      dockerfile: Dockerfile.mint
+    image: awg-profiler:mint
+    container_name: awg-profiler-mint
+    restart: unless-stopped
+
+    # ── Networking capabilities ──────────────────────────────────────────────
+    # NET_ADMIN: create/configure the WG interface and load nft rules.
+    # /dev/net/tun: the amneziawg-go userspace data plane needs a TUN device
+    # (no kernel module is loaded — see Dockerfile.mint header comment).
+    cap_add:
+      - NET_ADMIN
+    devices:
+      - /dev/net/tun:/dev/net/tun
+    sysctls:
+      net.ipv4.ip_forward: "1"
+
+    ports:
+      - "51820:51820/udp"           # AmneziaWG listen port (match SERVER_PUBLIC_PORT)
+      - "127.0.0.1:8080:8080/tcp"   # management web UI — localhost only by default;
+                                     # widen to "8080:8080" only after setting
+                                     # AWG_WEB_USER/AWG_WEB_PASS below
+
+    # ── Persistence ──────────────────────────────────────────────────────────
+    volumes:
+      - awg-data-mint:/data                 # config, client registry, profiles, state
+      - awg-etc-mint:/etc/amnezia/amneziawg  # interface .conf + nft ruleset
+
+    # ── Web UI auth (uncomment for anything beyond localhost/LAN) ─────────────
+    # environment:
+    #   AWG_WEB_USER: admin
+    #   AWG_WEB_PASS: "change-me-to-a-long-password"
+
+volumes:
+  awg-data-mint:
+  awg-etc-mint: