giiibates/wirebuddy repository overview

docker run -d \
  --name wirebuddy \
  --network host \
  --cap-drop ALL \
  --cap-add NET_ADMIN \
  --security-opt no-new-privileges:true \
  --stop-timeout 20 \
  --device /dev/net/tun:/dev/net/tun \
  -e TZ=Etc/UTC \
  -e WIREBUDDY_SECRET_KEY="$(head -c 32 /dev/urandom | base64)" \
  -e WIREBUDDY_TRUST_PROXY_HEADERS=1 \
  -v wirebuddy-data:/app/data \
  giiibates/wirebuddy:latest

services:
  wirebuddy:
    image: giiibates/wirebuddy:latest
    container_name: wirebuddy
    restart: always
    stop_grace_period: 20s
    network_mode: host
    cap_drop:
      - ALL
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun:/dev/net/tun
    environment:
      LOG_LEVEL: INFO
      TZ: Etc/UTC
      WIREBUDDY_SECRET_KEY: ""  # Generate with: head -c 32 /dev/urandom | base64
      # Required on first boot of a new database to create the bootstrap admin user
      WIREBUDDY_BOOTSTRAP_ADMIN_PASSWORD: "change-me-now"
      WIREBUDDY_TRUST_PROXY_HEADERS: "1"
      # If your reverse proxy is not on 127.0.0.1, set its IP or CIDR here.
      # FORWARDED_ALLOW_IPS: "127.0.0.1,172.18.0.0/16"
      WIREBUDDY_DATA_DIR: /app/data
    volumes:
      - ./data:/app/data
    logging:
      driver: json-file
      options:
        max-size: "50m"
        max-file: "5"
    security_opt:
      - no-new-privileges:true
    healthcheck:
      test: ["CMD", "curl", "--fail", "--silent", "--max-time", "5", "http://127.0.0.1:${WIREBUDDY_PORT:-8000}/health"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 15s