Comment on What are your VPN recommendations for accessing self-hosted applications from the outside?
ThunderLegend@sh.itjust.works 5 days ago
Wireguard is the way to go. I like using wg-easy to use wireguard because its easy to set up in a docker container.
k4j8@lemmy.world 4 days ago
wg-easy
Agree, highly recommend this and/or Tailscale.
Vanilla_PuddinFudge@infosec.pub 4 days ago
Double-pro. Running wireguard on docker assures that a native wireguard install won’t conflict with docker. Keep those tables in the same place.
phase@lemmy.8th.world 4 days ago
I thought I would be the only one to try this. Would you share more details on your setup? I am interested because to me Wireguard is in the kernel so how could it be in a container.
Vanilla_PuddinFudge@infosec.pub 4 days ago
Oh yeah. hub.docker.com/r/linuxserver/wireguard
Basically, docker can and does create network devices. It’s as easy for it to create wg0’s as it is to create networks for your docker containers. If you’re going to run wireguard and docker, you’re better off to let docker handle the network routing and just run one of the various containers out there, that one is more general. You can run it client or server. Wg-easy I believe is server-only, or even hide it inside other containers like docker-qbittorrent-wireguard, where it just hangs out and connects to whatever .conf you give it.