Traffic monitor and bandwidth management web UI

Ziel

6050

Standard

6050

Web UI port for a container routed through the gateway (e.g. qBittorrent, Deluge, IPTV). Must match the listening port on that container and be included in VPN_EXPOSE_PORTS_ON_LAN. Add additional port mappings for more containers.

Ziel

7075

Standard

7075

Config directory (WireGuard conf, traffic.conf, stats)

Ziel

/config

Standard

/mnt/user/appdata/vpn-gateway

Container Variable: VPN_ENABLED

Standard

true|false

Container Variable: VPN_CONF

Standard

wg0

Container Variable: VPN_PROVIDER

Standard

generic|proton|pia

Container Variable: VPN_LAN_NETWORK

Standard

192.168.1.0/24

Container Variable: VPN_LAN_LEAK_ENABLED

Standard

false|true

Container Variable: VPN_EXPOSE_PORTS_ON_LAN

Container Variable: VPN_AUTO_PORT_FORWARD

Standard

false|true

Container Variable: VPN_PORT_REDIRECTS

Container Variable: VPN_HEALTHCHECK_ENABLED

Standard

true|false

Container Variable: VPN_NAMESERVERS

Standard

1.1.1.1,8.8.8.8

Container Variable: VPN_PIA_USER

Container Variable: VPN_PIA_PASS

Container Variable: VPN_PIA_PREFERRED_REGION

Container Variable: VPN_PIA_DIP_TOKEN

Container Variable: VPN_PIA_PORT_FORWARD_PERSIST

Standard

false|true

Container Variable: TZ

Standard

America/New_York

Container Variable: PUID

Standard

99

Container Variable: PGID

Standard

100

Container Variable: UMASK

Standard

002

Optional: pin the Trusted Networks CIDR list at host level. Comma-separated list (e.g. 192.168.0.0/24, 192.168.0.5/32). When set, overrides the UI value and the UI field is locked. Leave empty to manage from the Security panel.

Optional: pin the Trusted Proxies list at host level for reverse-proxy deployments (SWAG, Authelia). Comma-separated list of proxy IPs that are allowed to set X-Forwarded-For. When set, overrides the UI value and the UI field is locked.