services:
  wireguard-easy:
    image: "{{ wireguard_easy_image }}:{{ wireguard_easy_version }}"
    container_name: wireguard-easy
    devices:
      - /dev/net/tun
    environment:
      - WG_HOST={{ wireguard_easy_host }}
      - PASSWORD_HASH={{ wireguard_easy_password_hash }}
    ports:
      - "{{ wireguard_easy_port }}:51820/udp"
      - "{{ wireguard_easy_admin_port }}:51821/tcp"
      - "80:80"
      - "{{ nginx_proxy_manager_port }}:81"
      - "{{ nginx_proxy_manager_ssl_port }}:443"
    volumes:
      - "{{ wireguard_easy_data_dir }}:/etc/wireguard"
      - "{{ wireguard_easy_config_dir }}:/opt/network"
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    sysctls:
      - net.ipv4.ip_forward=1
      - net.ipv6.conf.all.disable_ipv6=0
    networks:
      - {{ docker_network_name }}
    restart: unless-stopped

  nginx-proxy-manager:
    image: "{{ nginx_proxy_manager_image }}"
    container_name: "{{ nginx_proxy_manager_container_name }}"
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    restart: always
    network_mode: service:wireguard-easy
    depends_on:
      - wireguard-easy
    environment:
      INITIAL_ADMIN_EMAIL: {{ nginx_proxy_manager_admin_email }}
      INITIAL_ADMIN_PASSWORD: {{ nginx_proxy_manager_admin_password }}
    volumes:
      - "{{ nginx_proxy_manager_data_path }}:/data"
      - "{{ nginx_proxy_manager_letsencrypt_path }}:/etc/letsencrypt"

networks:
  {{ docker_network_name }}:
    driver: bridge