From 9be1f0b21d563a5f615c1343338cc214215ead35 Mon Sep 17 00:00:00 2001
From: feldjaeger <sascha@sascha-lutz.de>
Date: Sun, 8 Mar 2026 12:39:22 +0100
Subject: [PATCH] Add WireGuard service to Docker Compose

Added WireGuard service configuration to compose.yaml.
---
 compose.yaml | 29 +++++++++++++++++++++++++----
 1 file changed, 25 insertions(+), 4 deletions(-)

diff --git a/compose.yaml b/compose.yaml
index a1809a0..80d4ec3 100644
--- a/compose.yaml
+++ b/compose.yaml
@@ -8,7 +8,29 @@ networks:
 #          gateway: "2a01:4f8:120:2144::254"
 
 services:
-
+services:
+  wireguard:
+    image: lscr.io/linuxserver/wireguard:latest
+    container_name: wireguard
+    cap_add:
+      - NET_ADMIN
+      - SYS_MODULE
+    environment:
+      - PUID=1000
+      - PGID=1000
+      - TZ=Europe/Berlin
+      - INTERNAL_CONTROL_MODS=true
+      - NETWORK_INTERFACES=eth0
+      - LOCAL_NETWORK=10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,172.18.0.0/16
+    volumes:
+      - /app-config/wireguard/:/config
+      - /lib/modules:/lib/modules # Notwendig für WireGuard im Kernel
+    ports:
+      - 0.0.0.0:8096:8096 # SABnzbd Web-UI Port wird hier nach außen gereicht
+    sysctls:
+      - net.ipv4.conf.all.src_valid_mark=1
+    restart: unless-stopped
+    
   emby:
     image: lscr.io/linuxserver/emby:latest
     container_name: emby
@@ -40,9 +62,8 @@ services:
               capabilities: [gpu]
     ports:
       - "8096:8096"
-    networks:
-      emby_sascha_network:
-#        ipv6_address: 2a01:4f8:120:2144::c101:eb1
+    network_mode: "service:wireguard"
+    
 volumes:
   data:
     name: emby_data