services:
  $VAR:
    image: lscr.io/linuxserver/wireguard:latest
    container_name: $VAR-wireguard
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Etc/UTC
      - SERVERURL=vpn.koffeekube.io
      - SERVERPORT=51820
      - PEERS=200
      - PEERDNS=auto
      - INTERNAL_SUBNET=10.13.13.0
      - ALLOWEDIPS=0.0.0.0/0
      - PERSISTENTKEEPALIVE_PEERS=15
      - LOG_CONFS=true
    volumes:
      - $VAR-config:/config
    ports:
      - :51820/udp
    sysctls:
      - net.ipv4.conf.all.src_valid_mark=1
    restart: unless-stopped

volumes:
  $VAR-config: