mirror of
https://github.com/jmcorgan/fips.git
synced 2026-08-09 08:14:42 +00:00
Alex XieandGitHub
7258469b18
Add a documented macOS sidecar setup under examples so gateway traffic can be routed through a local Docker WireGuard sidecar for development and testing. Generate persistent FIPS and WireGuard key material on first run and keep those local runtime artifacts out of version control.
26 lines
636 B
YAML
26 lines
636 B
YAML
services:
|
|
fips-gateway:
|
|
build: .
|
|
image: fips-gateway:latest
|
|
container_name: fips-gateway
|
|
hostname: fips-gateway
|
|
privileged: true
|
|
devices:
|
|
- /dev/net/tun:/dev/net/tun
|
|
sysctls:
|
|
- net.ipv6.conf.all.disable_ipv6=0
|
|
- net.ipv6.conf.all.forwarding=1
|
|
- net.ipv4.ip_forward=1
|
|
ports:
|
|
- "5354:5354/udp"
|
|
- "5354:5354/tcp"
|
|
- "2222:22/tcp"
|
|
- "51820:51820/udp"
|
|
volumes:
|
|
- ./fips.yaml:/etc/fips/fips.yaml:ro
|
|
- ./identity/fips.key:/etc/fips/fips.key
|
|
- ./identity:/etc/fips/identity
|
|
environment:
|
|
- RUST_LOG=info
|
|
restart: unless-stopped
|