add: ignis, openvpn, wg-easy services

ignis/compose.yaml

@@ -0,0 +1,14 @@
+services:
+  ignis:
+    image: nobbe/ignis:latest
+    ports:
+      - "8031:8080"
+    environment:
+      - PUID=1000
+      - PGID=1000
+        #volumes:
+      #- ./vaults:/vaults
+        #- ./data:/app/data
+        #      - obsidian-app:/app/obsidian-app
+    restart: unless-stopped
+

openvpn/compose.yaml

@@ -0,0 +1,15 @@
+services:
+  openvpn:
+    image: kylemanna/openvpn:latest
+    container_name: openvpn
+    restart: unless-stopped
+    environment:
+      - TZ=Asia/Ho_Chi_Minh
+    ports:
+      - "1194:1194/udp"
+    volumes:
+      - /docker/openvpn:/etc/openvpn
+    cap_add:
+      - NET_ADMIN
+    devices:
+      - /dev/net/tun

wg-easy/compose.yaml

@@ -0,0 +1,23 @@
+services:
+  wg-easy:
+    image: ghcr.io/wg-easy/wg-easy:15
+    container_name: wg-easy
+    restart: unless-stopped
+    environment:
+      - TZ=Asia/Ho_Chi_Minh
+      - WG_HOST=vpn.fireflylab.cc
+      - INSECURE=true
+    volumes:
+      - /docker/wg-easy:/etc/wireguard
+      - /lib/modules:/lib/modules:ro
+    ports:
+      - "51820:51820/udp"
+      - "8032:51821/tcp"
+    privileged: true
+    cap_add:
+      - NET_ADMIN
+      - SYS_MODULE
+    sysctls:
+      - net.ipv4.ip_forward=1
+      - net.ipv4.conf.all.src_valid_mark=1
+      - net.ipv6.conf.all.forwarding=1