diff --git a/README.md b/README.md new file mode 100644 index 0000000..49eb307 --- /dev/null +++ b/README.md @@ -0,0 +1,44 @@ +Deploy WireGuard with [UI](https://github.com/ngoduykhanh/wireguard-ui) and HAProxy + +WireGuard UI configuration example: + + wireguard_ui_env: + WGUI_USERNAME: admin + WGUI_PASSWORD: admin + WGUI_MTU: 1420 + BIND_ADDRESS: 127.0.0.1:5001 + SESSION_SECRET: 74f8155b3c91437db6e6c29c28e23ecc + WGUI_CONFIG_FILE_PATH: /etc/wireguard/wg0.conf + +HAProxy configuration example: + + haproxy_ssl: yes + haproxy_self_signed_cert: yes + haproxy_config: + frontend: + well-known: + bind: ':80' + mode: http + acl: + - letsencrypt-acl path_beg /.well-known/acme-challenge/ + http-request: + - redirect scheme https if !{ path_beg /.well-known/acme-challenge/ } !{ ssl_fc } + use_backend: + - letsencrypt-backend if letsencrypt-acl + https: + bind: ':443 ssl crt {{ haproxy_ssl_path }}' + mode: http + acl: + - letsencrypt-acl path_beg /.well-known/acme-challenge/ + use_backend: + - letsencrypt-backend if letsencrypt-acl + default_backend: localhost_5001 + backend: + letsencrypt-backend: + mode: http + server: + - letsencrypt 127.0.0.1:8080 + localhost_5001: + mode: http + server: + - localhost 127.0.0.1:5001