services:
  wireknock-server:
    image: wireknock
    build: .
    container_name: wireknock-server
    hostname: wireknock-server
    restart: always
    environment:
      - IFACE=eth0
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Madrid
      - SERVERURL=wireknock-server
      - SERVERPORT=51820
      - PEERS=3
      - PEERDNS=auto
      - INTERNAL_SUBNET=192.168.9.0
      - ALLOWEDIPS=192.168.9.0/24,192.168.1.0/24
      - PERSISTENTKEEPALIVE_PEERS=all
      - LOG_CONFS=false
      - USE_COREDNS=false
    volumes:
      - ./config-server:/config
      - /lib/modules:/lib/modules:ro
      - ./init.sh:/custom-cont-init.d/init.sh:ro
      - ./knockd.conf:/etc/knockd.conf:ro
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    network_mode: host