Fix config and variable mismatches found in the audit

This commit is contained in:
Djeex
2026-09-07 12:59:34 +02:00
parent 1860f90785
commit 3c85fec634
24 changed files with 105 additions and 57 deletions
+5 -6
View File
@@ -60,8 +60,7 @@ tree:
- srv:
- docker:
- wg-easy:
- config:
- etc_wireguard/
- etc_wireguard/
- compose.yaml
- .env
---
@@ -70,7 +69,7 @@ tree:
::steps{level="3"}
### Deploy the stack
Open Dockge, click **Compose**, and name the stack `wg_easy`.
Open Dockge, click **Compose**, and name the stack `wg-easy`.
Copy the following configuration:
@@ -79,7 +78,7 @@ Copy the following configuration:
services:
wg-easy:
environment:
- INSECURE=true
- INSECURE=true # disables the web UI's own HTTPS; fine on a LAN-only or SWAG-fronted setup, remove it otherwise
image: ghcr.io/wg-easy/wg-easy:15
container_name: wg-easy
networks:
@@ -148,8 +147,8 @@ Once connected, follow the web UI instructions to:
Then go to *Administrator → Admin Panel → Config*:
- Change `Allowed IPs` from `0.0.0.0/24` to `10.8.0.0/24` for **split tunneling**.
- Remove IPv6 (it often causes unnecessary issues).
- Change `Allowed IPs` from the default `0.0.0.0/0` (full tunnel) to `10.8.0.0/24` for **split tunneling**.
- Optionally remove the IPv6 entry from `Allowed IPs` if you don't want client IPv6 traffic routed through the tunnel. This only affects what clients tunnel, not the container's own IPv6 setup above.
### Done !
::