Remove stray blank lines and start every stack with ---

content/en/3.serveex/3.security/1.wireguard.md

@@ -78,7 +78,6 @@ Copy the following configuration:
 services:
   wg-easy:
     environment:
-
       - INSECURE=true
     image: ghcr.io/wg-easy/wg-easy:15
     container_name: wg-easy
@@ -87,20 +86,16 @@ services:
         ipv4_address: 10.42.42.42
         ipv6_address: fdcc:ad94:bacf:61a3::2a
     volumes:
-
       - ./etc_wireguard:/etc/wireguard
       - /lib/modules:/lib/modules:ro
     ports:
-
       - "51820:51820/udp"
       - "51821:51821/tcp"
     restart: unless-stopped
     cap_add:
-
       - NET_ADMIN
       - SYS_MODULE
     sysctls:
-
       - net.ipv4.ip_forward=1
       - net.ipv4.conf.all.src_valid_mark=1
       - net.ipv6.conf.all.disable_ipv6=0
@@ -114,7 +109,6 @@ networks:
     ipam:
       driver: default
       config:
-
         - subnet: 10.42.42.0/24
         - subnet: fdcc:ad94:bacf:61a3::/64
 ```
@@ -126,11 +120,11 @@ networks:
 - Add a Watchtower label for automatic updates:
 
 ```yaml [compose.yaml]
+---
 services:
   wg-easy:
     # ...
     labels:
-
       - com.centurylinklabs.watchtower.enable=true
 ```
 ::
@@ -236,20 +230,18 @@ sudo cp ~/wg0.conf /docker/wireguard/config/wg_confs
 Create the `compose.yaml` file in `/docker/wireguard`:
 
 ```yaml [compose.yaml]
+---
 services:
   wireguard:
     image: lscr.io/linuxserver/wireguard:latest
     container_name: wireguard
     network_mode: host
     cap_add:
-
       - NET_ADMIN
       - SYS_MODULE
     environment:
-
       - TZ=Europe/Paris
     volumes:
-
       - /docker/wireguard/config:/config
       - /lib/modules:/lib/modules
     restart: unless-stopped