Background
WireGuard是一种新型的VPN协议,它通过在内核层运行,提供高效、安全、简单和现代的VPN解决方案。wg-easy是一个专为简化 WireGuard VPN配置和管理而设计的工具，提供了界面化的管理，进一步降低WireGuard 的使用门槛，让用户无需深入了解其底层工作原理即可轻松部署和管理 WireGuard VPN。firefly是最简单易用的轻量级、高性能WireGuard服务端软件，可广泛用于异地组网、远程办公、内网穿透等场景。支持自动申请免费SSL证书并续期。
1.各项目信息
# WireGuard 项目地址
https://github.com/WireGuard
# WireGuard 项目官网
https://www.wireguard.com/# wg-easy github地址
https://github.com/wg-easy/wg-easy# firefly github地址
https://github.com/Safe3/firefly
2.wg-easy安装
- run
docker run -d \--name=wg-easy \-e LANG=chs \-e WG_HOST=110.110.110.110 \ # 公网IP-e PASSWORD=123456 \ # web界面登录密码-e PORT=51821 \-e WG_PORT=51820 \-v /usr/local/wg-easy/data:/etc/wireguard \-p 51820:51820/udp \-p 51821:51821/tcp \--cap-add=NET_ADMIN \--cap-add=SYS_MODULE \--sysctl="net.ipv4.conf.all.src_valid_mark=1" \--sysctl="net.ipv4.ip_forward=1" \--restart unless-stopped \ghcr.io/wg-easy/wg-easy
docker-compose.yml
version: "3.5"
services:wg-easy:environment:- LANG=chs- WG_HOST=110.110.110.110- PASSWORD=123456- PORT=51821- WG_PORT=51820- WG_DEFAULT_ADDRESS=10.0.0.x- WG_DEFAULT_DNS=114.114.114.114- WG_MTU=1420- WG_ALLOWED_IPS=10.0.0.0/24- WG_PERSISTENT_KEEPALIVE=25- UI_TRAFFIC_STATS=true- UI_CHART_TYPE=2image: ghcr.io/wg-easy/wg-easycontainer_name: wg-easyvolumes:- /usr/local/wg-easy/data:/etc/wireguardports:- "51820:51820/udp"- "51821:51821/tcp"restart: unless-stoppedcap_add:- NET_ADMIN- SYS_MODULEsysctls:- net.ipv4.ip_forward=1- net.ipv4.conf.all.src_valid_mark=1
3.firefly安装
docker-compose.yml
version: '3'
services:firefly:image: "uusec/firefly:latest"container_name: fireflydevices:- /dev/net/tunnetwork_mode: hostvolumes:- /lib/modules:/lib/modules- /etc/firefly:/firefly/confcap_add:- NET_ADMIN- SYS_MODULErestart: unless-stoppedenvironment:- TZ=Asia/Shanghai- FIREFLY_DEVICE=eth0- FIREFLY_PASSWORD=firefly- FIREFLY_AUTO_SSL=false- FIREFLY_PORT=50121
4.启动异常解决Cannot find device "wg0"
$ wg-quick down wg0
$ wg-quick up wg0
Error: WireGuard exited with the error: Cannot find device "wg0"
This usually means that your host's kernel does not support WireGuard!at /app/lib/WireGuard.js:64:19at process.processTicksAndRejections (node:internal/process/task_queues:95:5)at async /app/lib/WireGuard.js:62:9
解决方法请参考另一篇文档【Linux内核升级】
