Skip to content

Commit 0f1d1ff

Browse files
adamanciniadamancini
committed
dont wrap the wg-easy chart
1 parent e7ec485 commit 0f1d1ff

File tree

9 files changed

+177
-179
lines changed

9 files changed

+177
-179
lines changed

‎applications/wg-easy/charts/wg-easy/charts/wg-easy/.helmignore‎ renamed to ‎applications/wg-easy/charts/wg-easy/.helmignore‎

File renamed without changes.

‎applications/wg-easy/charts/wg-easy/Chart.lock‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
dependencies:
2-
- name: templates
3-
repository: file://../templates
4-
version: 1.0.0
5-
digest: sha256:9939fc386e44c7a8d0a274f270ec92ac70ac9858442b4f85638122044082da74
6-
generated: "2025-05-06T15:20:40.596254-04:00"
2+
- name: common
3+
repository: https://bjw-s-labs.github.io/helm-charts
4+
version: 3.7.3
5+
digest: sha256:8d4fda6f1e6a4b35c83a8a65274352a9ade5a96ed80cfa68d072ab3f89d18d59
6+
generated: "2025-05-06T17:08:23.761384-04:00"

‎applications/wg-easy/charts/wg-easy/Chart.yaml‎

Lines changed: 14 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,16 @@
1-
name: wg-easy
2-
version: 1.0.0
31
apiVersion: v2
42
dependencies:
5-
- name: templates
6-
version: '*'
7-
repository: file://../templates
3+
- name: common
4+
repository: https://bjw-s-labs.github.io/helm-charts
5+
version: 3.7.3
6+
- name: templates
7+
version: '*'
8+
repository: file://../templates
9+
description: Simple wireguard with web configuration management
10+
home: https://github.com/chris-sanders/helm-charts/charts/wg-easy
11+
maintainers:
12+
- email: [email protected]
13+
name: Chris Sanders
14+
url: https://github.com/chris-sanders/helm-charts
15+
name: wg-easy
16+
version: 1.0.0

‎applications/wg-easy/charts/wg-easy/charts/wg-easy/README.md‎ renamed to ‎applications/wg-easy/charts/wg-easy/README.md‎

File renamed without changes.

‎applications/wg-easy/charts/wg-easy/charts/wg-easy/Chart.lock‎

Lines changed: 0 additions & 6 deletions
This file was deleted.

‎applications/wg-easy/charts/wg-easy/charts/wg-easy/Chart.yaml‎

Lines changed: 0 additions & 13 deletions
This file was deleted.

‎applications/wg-easy/charts/wg-easy/charts/wg-easy/values.yaml‎

Lines changed: 0 additions & 148 deletions
This file was deleted.

‎applications/wg-easy/charts/wg-easy/charts/wg-easy/templates/common.yaml‎ renamed to ‎applications/wg-easy/charts/wg-easy/templates/common.yaml‎

File renamed without changes.

‎applications/wg-easy/charts/wg-easy/values.yaml‎

Lines changed: 158 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,169 @@
1-
wg-easy:
2-
wireguard:
1+
# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s-labs/helm-charts/app-template-3.7.3/charts/other/app-template/values.schema.json
2+
controllers:
3+
main:
4+
containers:
5+
main:
6+
env:
7+
# Host is required, no default makes sense
8+
WG_HOST: '{{ required "external host name is required. Set wireguard.host" .Values.wireguard.host }}'
9+
# Use dig with sensible defaults for all other parameters
10+
WG_PORT: '{{ dig "wireguard" "port" "" .Values | quote }}'
11+
WG_MTU: '{{ dig "wireguard" "mtu" "" .Values | quote }}'
12+
WG_PERSISTENT_KEEPALIVE: '{{ dig "wireguard" "persistentKeepalive" "" .Values | quote }}'
13+
WG_DEFAULT_ADDRESS: '{{ dig "wireguard" "defaultAddress" "" .Values | quote }}'
14+
WG_DEFAULT_DNS: '{{ dig "wireguard" "defaultDns" "" .Values | quote }}'
15+
WG_ALLOWED_IPS: '{{ dig "wireguard" "allowedIps" "" .Values | quote }}'
16+
WG_PRE_UP: '{{ dig "wireguard" "preUp" "" .Values | quote }}'
17+
WG_POST_UP: '{{ dig "wireguard" "postUp" "" .Values | quote }}'
18+
WG_PRE_DOWN: '{{ dig "wireguard" "preDown" "" .Values | quote }}'
19+
WG_POST_DOWN: '{{ dig "wireguard" "postDown" "" .Values | quote }}'
20+
envFrom:
21+
- secretRef:
22+
identifier: webpass
23+
securityContext:
24+
allowPrivilegeEscalation: false
25+
sysctls:
26+
- name: net.ipv4.ip_forward
27+
value: "1"
28+
capabilities:
29+
add:
30+
- NET_ADMIN
31+
image:
32+
repository: ghcr.io/wg-easy/wg-easy
33+
tag: 9.0
34+
pullPolicy: IfNotPresent
35+
ports:
36+
- containerPort: 51821
37+
protocol: TCP
38+
- containerPort: 51820
39+
protocol: UDP
40+
resources:
41+
requests:
42+
cpu: 50m
43+
memory: 50Mi
44+
limits:
45+
cpu: 100m
46+
memory: 100Mi
47+
probes:
48+
liveness:
49+
enabled: true
50+
spec:
51+
initialDelaySeconds: 0
52+
periodSeconds: 10
53+
timeoutSeconds: 5
54+
failureThreshold: 5
55+
readiness:
56+
enabled: true
57+
spec:
58+
initialDelaySeconds: 0
59+
periodSeconds: 10
60+
timeoutSeconds: 1
61+
failureThreshold: 5
62+
63+
# Liveness: tcp-socket :51821 delay=0s timeout=5s period=10s #success=1 #failure=5
64+
# Readiness: tcp-socket :51821 delay=0s timeout=1s period=10s #success=1 #failure=5
65+
66+
secrets:
67+
webpass:
68+
enabled: true
69+
data:
70+
PASSWORD: '{{ dig "wireguard" "password" nil .Values | quote }}'
71+
72+
service:
73+
web:
74+
controller: main
75+
enabled: true
76+
type: ClusterIP
77+
ipFamilyPolicy: SingleStack
78+
ipFamilies:
79+
- IPv4
80+
ports:
81+
http:
82+
enabled: true
83+
port: 51821
84+
protocol: HTTP
85+
primary: true
86+
vpn:
87+
controller: main
88+
enabled: true
89+
type: LoadBalancer
90+
ipFamilyPolicy: SingleStack
91+
ipFamilies:
92+
- IPv4
93+
ports:
94+
udp:
95+
enabled: true
96+
port: 51820
97+
protocol: UDP
98+
99+
persistence:
100+
config:
101+
enabled: true
102+
type: persistentVolumeClaim
103+
storageClass: ''
104+
accessMode: ReadWriteOnce
105+
size: 1Gi
106+
retain: false
107+
globalMounts:
108+
- path: /etc/wireguard
109+
110+
# Wireguard configuration
111+
wireguard:
112+
# If password is defined will set a password on the web interface
3113
password: "testpass"
114+
# See https://github.com/WeeJeWel/wg-easy for configuration options
4115
host: "example.com"
5116
port: 51820 # This is used in the postUp
6117
defaultAddress: "10.10.10.x"
7118
defaultDns: "1.1.1.1"
8119
allowedIps: "0.0.0.0/5, 8.0.0.0/7, 11.0.0.0/8, 12.0.0.0/6, 16.0.0.0/4, 32.0.0.0/3, 64.0.0.0/2, 128.0.0.0/3, 160.0.0.0/5, 168.0.0.0/6, 172.0.0.0/12, 172.32.0.0/11, 172.64.0.0/10, 172.128.0.0/9, 173.0.0.0/8, 174.0.0.0/7, 176.0.0.0/4, 192.0.0.0/9, 192.128.0.0/11, 192.160.0.0/13, 192.169.0.0/16, 192.170.0.0/15, 192.172.0.0/14, 192.176.0.0/12, 192.192.0.0/10, 193.0.0.0/8, 194.0.0.0/7, 196.0.0.0/6, 200.0.0.0/5, 208.0.0.0/4, 224.0.0.0/3"
9120
postUp: "iptables -A FORWARD -i wg0 -o eth0 -d 192.168.0.0/16,172.16.0.0/12,10.0.0.0/8 -j DROP; iptables -t nat -A POSTROUTING -s 10.10.10.0/24 -o eth0 -j MASQUERADE; iptables -A INPUT -p udp -m udp --dport 51820 -j ACCEPT; iptables -A FORWARD -i wg0 -j ACCEPT; iptables -A FORWARD -o wg0 -j ACCEPT"
10121

122+
# Troubleshoot
123+
troubleshoot:
124+
support-bundles:
125+
replicated:
126+
enabled: true
127+
# wg-easy: # arbitrary name for your custom spec
128+
# enabled: true
129+
# collectors:
130+
# - logs:
131+
# name: wg-easy
132+
# collectorName: wg-easy
133+
# selector:
134+
# - app=wg-easy
135+
# # namespace: {{ .Release.Namespace }}
136+
# containerNames:
137+
# - wg-easy
138+
# securityContext:
139+
# allowPrivilegeEscalation: false
140+
# sysctls:
141+
# - name: net.ipv4.ip_forward
142+
# value: "1"
143+
# capabilities:
144+
# add:
145+
# - NET_ADMIN
146+
# image:
147+
# repository: ghcr.io/wg-easy/wg-easy
148+
# tag: 9.0
149+
# pullPolicy: IfNotPresent
150+
# ports:
151+
# - containerPort: 51821
152+
# protocol: TCP
153+
# - containerPort: 51820
154+
# protocol: UDP
155+
# resources:
156+
# requests:
157+
# cpu: 50m
158+
# memory: 50Mi
159+
# limits:
160+
# cpu: 100m
161+
# memory: 100Mi
162+
163+
164+
wg-easy:
165+
166+
11167
templates:
12168
traefikRoutes:
13169
web-tls:

0 commit comments

Comments
 (0)