docker-compose.local.yml

services:
  backend:
    build:
      context: ./backend
      dockerfile: Dockerfile
    container_name: wg-backend
    restart: unless-stopped
    env_file:
      - .env
    ports:
      - "${WG_DEFAULT_PORT:-51820}:${WG_DEFAULT_PORT:-51820}/udp"
    volumes:
      - ./data:/data
      - ./wireguard:/etc/wireguard
    networks:
      - wg-network
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    sysctls:
      - net.ipv4.ip_forward=1
      - net.ipv4.conf.all.src_valid_mark=1
      - net.ipv6.conf.all.forwarding=1
      - net.ipv6.conf.default.forwarding=1
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:5000/api/health"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 40s

  frontend:
    build:
      context: ./frontend
      dockerfile: Dockerfile
    container_name: wg-frontend
    restart: unless-stopped
    ports:
      - "8080:80"
    depends_on:
      backend:
        condition: service_healthy
    networks:
      - wg-network
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:80"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 10s

networks:
  wg-network:
    driver: bridge
    enable_ipv6: true