![](/static/61a827a1/assets/icons/icon-96x96.png)
![](https://lemmy.world/pictrs/image/8286e071-7449-4413-a084-1eb5242e2cf4.png)
6·
18 days agoThis is my wireguard docker setup:
version: "3.6"
services:
wireguard:
image: linuxserver/wireguard
container_name: wireguard
cap_add:
- NET_ADMIN
- SYS_MODULE
environment:
- PUID=116
- PGID=122
- TZ=Europe/Stockholm
- ALLOWEDIPS=192.168.1.0/24
volumes:
- /data/torrent/wireguard/config:/config
- /lib/modules:/lib/modules
ports:
- 192.168.1.111:8122:8122 # Deluge webui
- 192.168.1.111:9127:9127 # jackett webui
- 192.168.1.111:9666:9666 # prowlarr webui
- 51820:51820/udp # wireguard
- 192.168.1.111:58426:58426 # Deluge RPC
sysctls:
- net.ipv4.conf.all.src_valid_mark=1
- net.ipv6.conf.all.disable_ipv6=1
- net.ipv6.conf.default.disable_ipv6=1
restart: unless-stopped
Can reach the webuis from LAN, no other network configuration was necessary. 192.168.1.111 is the server’s LAN address. The other services are configured very similar to your qbittorrent, and don’t expose any ports. Can’t promise it’s 100% correct but it’s working for me.
Intel NUC running Linux. Not the cheapest solution but can play anything and I have full control over it. At first I tried to find some kind of programmable remote but now we have a wireless keyboard with built-in touchpad.
Biggest downside is that the hardware quality is kind of questionable and the first two broke after 3 years + a few months, so we’re on our third now.