From 60c0b4245ee6808535ed488e54d5ecd65739c364 Mon Sep 17 00:00:00 2001
From: feldjaeger <sascha@sascha-lutz.de>
Date: Tue, 24 Mar 2026 20:56:24 +0100
Subject: [PATCH] Replace wireguard with wstunnel-client in compose.yaml

Removed wireguard service and added wstunnel-client service for tunneling. Updated emby service to use emby_sascha_network.
---
 compose.yaml | 44 ++++++++++++++++++++------------------------
 1 file changed, 20 insertions(+), 24 deletions(-)

diff --git a/compose.yaml b/compose.yaml
index d260b53..78afa5c 100644
--- a/compose.yaml
+++ b/compose.yaml
@@ -4,28 +4,24 @@ networks:
     name: emby_chris_network
 
 services:
-  wireguard:
-    image: lscr.io/linuxserver/wireguard:latest
-    container_name: wireguard
-    cap_add:
-      - NET_ADMIN
-      - SYS_MODULE
-    environment:
-      - PUID=1000
-      - PGID=1000
-      - TZ=Europe/Berlin
-      - LOCAL_NETWORK=10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,172.18.0.0/16
-    volumes:
-      - /app-config/wireguard/:/config
-      - /lib/modules:/lib/modules
-    ports:
-      - 0.0.0.0:8096:8096  # Emby erbt diesen Port über network_mode
-    sysctls:
-      - net.ipv4.conf.all.src_valid_mark=1
-      - net.ipv4.ip_forward=1        # ← NEU: Forwarding im Container
-    networks:
-      - emby_chris_network          # ← NEU: Netzwerk zuweisen
+  wstunnel-client:
+    image: ghcr.io/erebe/wstunnel:latest
+    container_name: wstunnel-client        # ← für docker logs/ps übersichtlicher
     restart: unless-stopped
+    networks:
+      - emby_sascha_network
+    command: >
+      client
+      -R 'tcp://9106:emby:8096'
+      wss://tunnel.sascha-lutz.de/wg-tunnel
+    depends_on:                            # ← wstunnel startet erst wenn emby läuft
+      - emby
+    logging:
+      driver: "json-file"
+      options:
+        max-size: "10m"
+        max-file: "3"
+
 
   emby:
     image: lscr.io/linuxserver/emby:latest
@@ -43,6 +39,8 @@ services:
       - NVIDIA_DRIVER_CAPABILITIES=all
       - NVIDIA_VISIBLE_DEVICES=all
     restart: unless-stopped
+    networks:
+      - emby_sascha_network
     devices:
       - /dev/nvidia0:/dev/nvidia0
       - /dev/nvidiactl:/dev/nvidiactl
@@ -56,9 +54,7 @@ services:
             - driver: nvidia
               count: all
               capabilities: [gpu]
-    network_mode: "service:wireguard"  # Emby nutzt WireGuard-Netzwerk
-    depends_on:
-      - wireguard                      # ← NEU: Startreihenfolge sichern
+
 
 volumes:
   data: