vpn-gateway

vpn-gateway

Aplicación Docker from ProphetSe7en's Repository

Visión general

VPN gateway with nftables bandwidth limiting, scheduling, hot-reload, and web UI. Built on hotio/base:alpinevpn — all hotio VPN features (WireGuard, PIA, Proton) work out of the box. Route containers through WireGuard with per-service rate limits, time-based rules, and real-time traffic monitoring. First boot redirects to /setup to create an admin account — Radarr/Sonarr-style auth with API key for Homepage/scripts.

Requisitos

Click Show more settings for all VPN variables. Generic provider requires a WireGuard config in /config/wireguard/wg0.conf. PIA/Proton auto-configure with credentials. First container start redirects to /setup — set a strong admin password (≥10 chars, 2+ of upper/lower/digit/symbol). Homepage widget uses /api/stats/widget (public, no auth needed); other /api/ endpoints need X-Api-Key header from Settings → Security.

Argumentos en tiempo de ejecución

Interfaz web
http://[IP]:[PORT:6050]
Red
bridge
Concha
bash
Privilegiado
false
Parámetros adicionales
--hostname=vpn-gateway.internal --cap-add=NET_ADMIN

Configuración de plantillas

Traffic Monitor Web UIPorttcp

Traffic monitor and bandwidth management web UI

Objetivo
6050
Por defecto
6050
Container Web UIPorttcp

Web UI port for a container routed through the gateway (e.g. qBittorrent, Deluge, IPTV). Must match the listening port on that container and be included in VPN_EXPOSE_PORTS_ON_LAN. Add additional port mappings for more containers.

Objetivo
7075
Por defecto
7075
Config PathPathrw

Config directory (WireGuard conf, traffic.conf, stats)

Objetivo
/config
Por defecto
/mnt/user/appdata/vpn-gateway
VPN_ENABLEDVariable

Container Variable: VPN_ENABLED

Por defecto
true|false
VPN_CONFVariable

Container Variable: VPN_CONF

Por defecto
wg0
VPN_PROVIDERVariable

Container Variable: VPN_PROVIDER

Por defecto
generic|proton|pia
VPN_LAN_NETWORKVariable

Container Variable: VPN_LAN_NETWORK

Por defecto
192.168.1.0/24
VPN_LAN_LEAK_ENABLEDVariable

Container Variable: VPN_LAN_LEAK_ENABLED

Por defecto
false|true
VPN_EXPOSE_PORTS_ON_LANVariable

Container Variable: VPN_EXPOSE_PORTS_ON_LAN

VPN_AUTO_PORT_FORWARDVariable

Container Variable: VPN_AUTO_PORT_FORWARD

Por defecto
false|true
VPN_PORT_REDIRECTSVariable

Container Variable: VPN_PORT_REDIRECTS

VPN_HEALTHCHECK_ENABLEDVariable

Container Variable: VPN_HEALTHCHECK_ENABLED

Por defecto
true|false
VPN_NAMESERVERSVariable

Container Variable: VPN_NAMESERVERS

Por defecto
1.1.1.1,8.8.8.8
VPN_PIA_USERVariable

Container Variable: VPN_PIA_USER

VPN_PIA_PASSVariable

Container Variable: VPN_PIA_PASS

VPN_PIA_PREFERRED_REGIONVariable

Container Variable: VPN_PIA_PREFERRED_REGION

VPN_PIA_DIP_TOKENVariable

Container Variable: VPN_PIA_DIP_TOKEN

VPN_PIA_PORT_FORWARD_PERSISTVariable

Container Variable: VPN_PIA_PORT_FORWARD_PERSIST

Por defecto
false|true
TZVariable

Container Variable: TZ

Por defecto
America/New_York
PUIDVariable

Container Variable: PUID

Por defecto
99
PGIDVariable

Container Variable: PGID

Por defecto
100
UMASKVariable

Container Variable: UMASK

Por defecto
002
TRUSTED_NETWORKSVariable

Optional: pin the Trusted Networks CIDR list at host level. Comma-separated list (e.g. 192.168.0.0/24, 192.168.0.5/32). When set, overrides the UI value and the UI field is locked. Leave empty to manage from the Security panel.

TRUSTED_PROXIESVariable

Optional: pin the Trusted Proxies list at host level for reverse-proxy deployments (SWAG, Authelia). Comma-separated list of proxy IPs that are allowed to set X-Forwarded-For. When set, overrides the UI value and the UI field is locked.

Categorías

Detalles

Repositorio
ghcr.io/prophetse7en/vpn-gateway:v1.4.2
Última actualización2026-05-31
Visto por primera vez2026-04-24

Ejecute vpn-gateway en Unraid.

vpn-gateway se encuentra en Community Apps para Unraid OS. Explore Unraid para crear un servidor doméstico flexible, un NAS o un laboratorio doméstico.