From 6516d67d0b29b24f5b8d418e4aa13f2c7a245971 Mon Sep 17 00:00:00 2001
From: openfox-pilot <pilot@folzocorp.local>
Date: Sun, 11 Oct 2026 17:08:51 +0200
Subject: [PATCH] =?UTF-8?q?compose=20wireguard=20(E4,=20linuxserver=20?=
 =?UTF-8?q?=C3=A9pingl=C3=A9=20digest)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../compose/wireguard/docker-compose.yml      | 22 +++++++++++++++++++
 1 file changed, 22 insertions(+)
 create mode 100644 g9-migration/compose/wireguard/docker-compose.yml

diff --git a/g9-migration/compose/wireguard/docker-compose.yml b/g9-migration/compose/wireguard/docker-compose.yml
new file mode 100644
index 0000000..032585c
--- /dev/null
+++ b/g9-migration/compose/wireguard/docker-compose.yml
@@ -0,0 +1,22 @@
+# WireGuard — E4 (J5040) : accès VPN famille (portable). LAN-only (ufw 51820 udp WAN).
+# Config client générée à l'activation (wg genkey, QR via `wg show`); secrets hors git.
+services:
+  wireguard:
+    image: lscr.io/linuxserver/wireguard@sha256:437a490f7afc6969434251351ba47455a3829e71cef9c6172f3f533332d04063
+    container_name: wireguard
+    restart: unless-stopped
+    labels:
+      - "com.centurylinklabs.watchtower.enable=false"
+    cap_add:
+      - NET_ADMIN
+      - SYS_MODULE
+    sysctls:
+      - net.ipv4.ip_forward=1
+      - net.ipv6.conf.all.forwarding=1
+    environment:
+      - WG_HOST=folzocorp.fr
+      - WG_PORT=51820
+    volumes:
+      - ./wg:/etc/wireguard
+    ports:
+      - "0.0.0.0:51820:51820/udp"