diff options
| author | yyamashita <yyamashita@hetzner.yyamashita.com> | 2026-06-30 22:29:07 +0900 |
|---|---|---|
| committer | yyamashita <yyamashita@hetzner.yyamashita.com> | 2026-06-30 22:29:07 +0900 |
| commit | 58f7917662ff92a3712289acccff8310c8f1baff (patch) | |
| tree | cf7290a3eaf0e08c170199ac831f562949785014 /vpn/docker-compose.yml | |
| parent | 1ad98cc2f9f8a5950aec998a6daacec381cbe2c4 (diff) | |
Add strongSwan IKEv2 VPN service
- vpn/: Dockerfile, docker-compose.yml, swanctl.conf.tpl, entrypoint.sh
- install.sh: Caddy 証明書流用 + コンテナ起動
- renew-cert.sh: 証明書更新 + swanctl ホットリロード
- caddy/Caddyfile: vpn.yyamashita.com 追加（Let's Encrypt 証明書取得用）
- post-receive: vpn/deploy.sh を追加
- setup-route53.py: WEB_SUBDOMAINS に vpn を追加
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Diffstat (limited to 'vpn/docker-compose.yml')
| -rw-r--r-- | vpn/docker-compose.yml | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/vpn/docker-compose.yml b/vpn/docker-compose.yml new file mode 100644 index 0000000..83ff270 --- /dev/null +++ b/vpn/docker-compose.yml @@ -0,0 +1,14 @@ +services: + vpn: + build: . + restart: unless-stopped + network_mode: host + cap_add: + - NET_ADMIN + - SYS_MODULE + volumes: + - ./certs/server.crt:/etc/swanctl/x509/server.crt:ro + - ./certs/server.key:/etc/swanctl/private/server.key:ro + - ./users.conf:/etc/strongswan/users.conf:ro + environment: + - VPN_DOMAIN=vpn.yyamashita.com |