Traffic monitor and bandwidth management web UI

Cible

6050

Défaut

6050

Web UI port for a container routed through the gateway (e.g. qBittorrent, Deluge, IPTV). Must match the listening port on that container and be included in VPN_EXPOSE_PORTS_ON_LAN. Add additional port mappings for more containers.

Cible

7075

Défaut

7075

Config directory (WireGuard conf, traffic.conf, stats)

Cible

/config

Défaut

/mnt/user/appdata/vpn-gateway

Container Variable: VPN_ENABLED

Défaut

true|false

Container Variable: VPN_CONF

Défaut

wg0

Container Variable: VPN_PROVIDER

Défaut

generic|proton|pia

Container Variable: VPN_LAN_NETWORK

Défaut

192.168.1.0/24

Container Variable: VPN_LAN_LEAK_ENABLED

Défaut

false|true

Container Variable: VPN_EXPOSE_PORTS_ON_LAN

Container Variable: VPN_AUTO_PORT_FORWARD

Défaut

false|true

Container Variable: VPN_PORT_REDIRECTS

Container Variable: VPN_HEALTHCHECK_ENABLED

Défaut

true|false

Container Variable: VPN_NAMESERVERS

Défaut

1.1.1.1,8.8.8.8

Container Variable: VPN_PIA_USER

Container Variable: VPN_PIA_PASS

Container Variable: VPN_PIA_PREFERRED_REGION

Container Variable: VPN_PIA_DIP_TOKEN

Container Variable: VPN_PIA_PORT_FORWARD_PERSIST

Défaut

false|true

Container Variable: TZ

Défaut

America/New_York

Container Variable: PUID

Défaut

99

Container Variable: PGID

Défaut

100

Container Variable: UMASK

Défaut

002

Optional: pin the Trusted Networks CIDR list at host level. Comma-separated list (e.g. 192.168.0.0/24, 192.168.0.5/32). When set, overrides the UI value and the UI field is locked. Leave empty to manage from the Security panel.

Optional: pin the Trusted Proxies list at host level for reverse-proxy deployments (SWAG, Authelia). Comma-separated list of proxy IPs that are allowed to set X-Forwarded-For. When set, overrides the UI value and the UI field is locked.