diff options
| author | hc <hc@a.nub.ninja> | 2026-02-07 12:15:01 +0000 |
|---|---|---|
| committer | hc <hc@a.nub.ninja> | 2026-02-07 12:15:01 +0000 |
| commit | f6cdeabe2f57b97299308e16486958ed122315b9 (patch) | |
| tree | c570f1b5ef373eb251c8504992b95f1b7789746f /Dockerfile.mullvad | |
Diffstat (limited to 'Dockerfile.mullvad')
| -rw-r--r-- | Dockerfile.mullvad | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/Dockerfile.mullvad b/Dockerfile.mullvad new file mode 100644 index 0000000..9998d60 --- /dev/null +++ b/Dockerfile.mullvad | |||
| @@ -0,0 +1,20 @@ | |||
| 1 | FROM rockylinux/rockylinux:10 | ||
| 2 | |||
| 3 | RUN dnf install -y epel-release && \ | ||
| 4 | dnf install -y \ | ||
| 5 | wireguard-tools \ | ||
| 6 | iptables \ | ||
| 7 | iproute \ | ||
| 8 | curl \ | ||
| 9 | procps-ng \ | ||
| 10 | && dnf clean all | ||
| 11 | |||
| 12 | # Copy WireGuard config (exported from Mullvad website) | ||
| 13 | COPY wg0.conf /etc/wireguard/wg0.conf | ||
| 14 | RUN chmod 600 /etc/wireguard/wg0.conf | ||
| 15 | |||
| 16 | # Kill switch: only allow traffic through the VPN tunnel | ||
| 17 | COPY entrypoint.sh /entrypoint.sh | ||
| 18 | RUN chmod +x /entrypoint.sh | ||
| 19 | |||
| 20 | ENTRYPOINT ["/entrypoint.sh"] | ||
