107 lines
1.8 KiB
Markdown
107 lines
1.8 KiB
Markdown
# 📦 wg-easy (WireGuard VPN) — установка через Docker
|
|
|
|
Простой способ развернуть VPN сервер WireGuard с веб-интерфейсом.
|
|
|
|
---
|
|
|
|
## 🚀 Быстрый старт
|
|
|
|
### 1. Установить Docker
|
|
|
|
```bash
|
|
apt update && apt upgrade -y
|
|
apt install -y docker.io
|
|
systemctl enable docker
|
|
systemctl start docker
|
|
```
|
|
|
|
Проверка:
|
|
|
|
```bash
|
|
docker --version
|
|
```
|
|
|
|
---
|
|
|
|
## 🌐 2. Открыть порты (если используется firewall)
|
|
|
|
```bash
|
|
ufw allow 51820/udp
|
|
ufw allow 51821/tcp
|
|
ufw enable
|
|
```
|
|
|
|
---
|
|
|
|
## 🔐 3. Запуск wg-easy
|
|
|
|
```bash
|
|
docker run -d \
|
|
--name=wg-easy \
|
|
-e WG_HOST=193.124.57.125 \
|
|
-e PASSWORD_HASH='$2a$12$TXjvDufTG5P4ef6k7M0F..3z7NekUPoHnaNyHnY9XHrSIlxG5nPyO' \
|
|
-e WG_DEFAULT_DNS=1.1.1.1,1.0.0.1 \
|
|
-v /etc/wireguard:/etc/wireguard \
|
|
-p 51820:51820/udp \
|
|
-p 51821:51821/tcp \
|
|
--cap-add=NET_ADMIN \
|
|
--cap-add=SYS_MODULE \
|
|
--sysctl="net.ipv4.conf.all.src_valid_mark=1" \
|
|
--sysctl="net.ipv4.ip_forward=1" \
|
|
--restart unless-stopped \
|
|
ghcr.io/wg-easy/wg-easy
|
|
```
|
|
|
|
---
|
|
|
|
## 🔍 4. Проверка работы
|
|
|
|
```bash
|
|
docker logs -f wg-easy
|
|
```
|
|
|
|
Ожидаемый результат:
|
|
|
|
```
|
|
Server Listening on http://0.0.0.0:51821
|
|
```
|
|
|
|
---
|
|
|
|
## 🌍 5. Доступ к панели
|
|
|
|
Открыть в браузере:
|
|
|
|
```
|
|
http://193.124.57.125:51821
|
|
```
|
|
|
|
---
|
|
|
|
## ⚙️ 6. Решение проблем
|
|
|
|
### ❌ Нет интернета через VPN
|
|
|
|
```bash
|
|
sysctl -w net.ipv4.ip_forward=1
|
|
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
|
|
```
|
|
|
|
---
|
|
|
|
## 🔐 Генерация пароля
|
|
|
|
```bash
|
|
docker run --rm ghcr.io/wg-easy/wg-easy wgpw yourpassword
|
|
```
|
|
|
|
---
|
|
|
|
## 📁 Полезные команды
|
|
|
|
```bash
|
|
docker stop wg-easy
|
|
docker rm wg-easy
|
|
docker pull ghcr.io/wg-easy/wg-easy
|
|
```
|