wireguard

Docker 应用程序 from linuxserver's Repository

概述

WireGuard®(https://www.wireguard.com/) is an extremely simple yet fast and modern VPN that utilizes state-of-the-art cryptography. It aims to be faster, simpler, leaner, and more useful than IPsec, while avoiding the massive headache. It intends to be considerably more performant than OpenVPN. WireGuard is designed as a general purpose VPN for running on embedded interfaces and super computers alike, fit for many different circumstances. Initially released for the Linux kernel, it is now cross-platform (Windows, macOS, BSD, iOS, Android) and widely deployable. It is currently under heavy development, but already it might be regarded as the most secure, easiest to use, and simplest VPN solution in the industry.

运行时参数

网络: bridge
外壳: bash
特权: false
额外参数: --cap-add=NET_ADMIN --cap-add=SYS_MODULE --sysctl=net.ipv4.conf.all.src_valid_mark=1

模板配置

WebUIPortudp

wireguard port

目标: 51820
默认值: 51820

AppdataPathrw

Contains all relevant configuration files.

目标: /config

Path: /lib/modulesPathrw

Maps host's modules folder.

目标: /lib/modules

SERVERURLVariable

External IP or domain name for docker host. Used in server mode. If set to `auto`, the container will try to determine and set the external IP automatically

默认值: wireguard.domain.com

SERVERPORTVariable

External port for docker host. Used in server mode.

默认值: 51820

PEERSVariable

Number of peers to create confs for. Required for server mode. Can also be a list of names: `myPC,myPhone,myTablet` (alphanumeric only)

默认值: 1

PEERDNSVariable

DNS server set in peer/client configs (can be set as `8.8.8.8`). Used in server mode. Defaults to `auto`, which uses wireguard docker host's DNS via included CoreDNS forward.

默认值: auto

INTERNAL_SUBNETVariable

Internal subnet for the wireguard and server and peers (only change if it clashes). Used in server mode.

默认值: 10.13.13.0

ALLOWEDIPSVariable

The IPs/Ranges that the peers will be able to reach using the VPN connection. If not specified the default value is: '0.0.0.0/0, ::0/0' This will cause ALL traffic to route through the VPN, if you want split tunneling, set this to only the IPs you would like to use the tunnel AND the ip of the server's WG ip, such as 10.13.13.1.

默认值: 0.0.0.0/0

LOG_CONFSVariable

Generated QR codes will be displayed in the docker log. Set to `false` to skip log output.

默认值: true

PUIDVariable

Container Variable: PUID

默认值: 99

PGIDVariable

Container Variable: PGID

默认值: 100

UMASKVariable

Container Variable: UMASK

默认值: 022

下载统计数据

63,324,981

下载总数

576,813

本月

397,287

平均每月

长期下载总量

加载图表...

链接

模板支持登记处 Pro连接

详细信息

存储库

lscr.io/linuxserver/wireguard

登记处

https://github.com/orgs/linuxserver/packages/container/package/wireguard

最后更新2026-05-21

初见2021-12-26

在Unraid 上运行 Wireguard 。

Wireguard 已被列入Unraid OS 的社区应用程序。探索Unraid ，构建灵活的家庭服务器、NAS 或家庭实验室。

探索Unraid OS