admin/WhatIDo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: get cloudflared WireGuard tunnel actually serving

Browse Source 
- Dockerfile.cloudflared: add iptables + ip6tables (wg-quick needs them for ::/0 full tunnel)

- docker-compose: privileged:true for cloudflared so wg-quick can set net.ipv4.conf.all.src_valid_mark

- start-cloudflared.sh: restore resolv.conf after wg-quick (resolvconf wiped docker DNS 127.0.0.11 => app unresolvable => Host Error)
This commit is contained in:
dev
2026-09-12 18:51:19 +03:00
parent dd4d306a4e
commit 3c40e94a57
3 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Dockerfile.cloudflared
+1 -1
View File
@@ -6,7 +6,7 @@
FROM cloudflare/cloudflared:latest AS cf
FROM alpine:3.20
RUN apk add --no-cache wireguard-tools iproute2
RUN apk add --no-cache wireguard-tools iproute2 iptables ip6tables
COPY --from=cf /usr/local/bin/cloudflared /usr/bin/cloudflared
COPY start-cloudflared.sh /start-cloudflared.sh
ENTRYPOINT ["/bin/sh", "/start-cloudflared.sh"]