1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15

sudo apt-get update
sudo apt-get install \
    apt-transport-https \
    ca-certificates \
    curl \
    gnupg-agent \
    software-properties-common -y
curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key add -
sudo add-apt-repository \
   "deb [arch=amd64] https://download.docker.com/linux/ubuntu \
   $(lsb_release -cs) \
   stable"
sudo apt-get install docker-ce docker-ce-cli containerd.io -y
systemctl start docker
systemctl enable docker

1
2
3

curl -fsSL https://get.docker.com | bash -s docker
curl -L "https://github.com/docker/compose/releases/download/2.11.2/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose
chmod +x /usr/local/bin/docker-compose

1
2
3
4

# frpc 内网穿透文件夹
mkdir -p /data/frp/
# wireguard文件夹
mkdir -p /data/wireguard

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13

docker run -d \
  --name=wg-easy \
  -e WG_HOST=IP或域名(Frpc内网域名) \
  -e PASSWORD=后台密码 \
  -v /data/wireguard:/etc/wireguard \
  -p 51820:51820/udp \
  -p 51821:51821/tcp \
  --cap-add=NET_ADMIN \
  --cap-add=SYS_MODULE \
  --sysctl="net.ipv4.conf.all.src_valid_mark=1" \
  --sysctl="net.ipv4.ip_forward=1" \
  --restart unless-stopped \
  weejewel/wg-easy

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34

version: "3.8"
services:
  wg-easy:
    environment:
      # ⚠️ Required:
      # Change this to your host's public address
      - WG_HOST=IP或域名(Frpc内网域名)

      # Optional:
      - PASSWORD=后台密码
      - WG_PORT=51820
      # - WG_DEFAULT_ADDRESS=10.8.0.x
      # - WG_DEFAULT_DNS=1.1.1.1
      # - WG_MTU=1420
      - WG_ALLOWED_IPS=0.0.0.0/0, ::/0
      # - WG_PRE_UP=echo "Pre Up" > /etc/wireguard/pre-up.txt
      # - WG_POST_UP=echo "Post Up" > /etc/wireguard/post-up.txt
      # - WG_PRE_DOWN=echo "Pre Down" > /etc/wireguard/pre-down.txt
      # - WG_POST_DOWN=echo "Post Down" > /etc/wireguard/post-down.txt
      
    image: weejewel/wg-easy
    container_name: wg-easy
    volumes:
      - /data/wireguard:/etc/wireguard
    ports:
      - "51820:51820/udp"
      - "51821:51821/tcp"
    restart: unless-stopped
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    sysctls:
      - net.ipv4.ip_forward=1
      - net.ipv4.conf.all.src_valid_mark=1

1

docker run --restart=always --network host -d -v /data/frp/frps.ini:/etc/frp/frps.ini --name frps snowdreamtech/frps

1
2
3
4
5
6
7
8
9

version: "3"
services:
  serverstatus:
    image: snowdreamtech/frps:latest
    container_name: frps
    volumes:
      - /data/frp/frps.ini:/etc/frp/frps.ini
    restart: always
    network_mode: host

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20

[common]
bind_addr = 0.0.0.0
#与客户端 通讯绑定端口
bind_port = 0000

#dashboard 用户名
dashboard_user = user  
#dashboard 密码
dashboard_pwd = passwrod
#dashboard 端口，启动成功后可通过浏览器访问如http://ip:0000
dashboard_port = 0000  
#设置客户端token，对应客户端有页需要配置
token = 0000-0000-0000-0000-0000

#设置监听 HTTP 请求端口为 88/88 HTTP/S 类型的代理相比于 TCP 类型，不仅在服务端只需要监听一个额外的端口 vhost_http_port 用于接收 HTTP 请求，还额外提供了基于 HTTP 协议的诸多功能。

vhost_http_port = 00
vhost_https_port = 00
# 替换为自己的域名,*.XX.com 泛域名,域名解析为 *.xxx.com
subdomain_host = xx.xxx.com

1

docker run --restart=always --network host -d -v /data/frp/frpc.ini:/etc/frp/frpc.ini --name frpc snowdreamtech/frpc

1
2
3
4
5
6
7
8
9

version: "3"
services:
  serverstatus:
    image: snowdreamtech/frpc:latest
    container_name: frpc
    volumes:
      - /data/frp/frpc.ini:/etc/frp/frpc.ini
    restart: always
    network_mode: host

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12

[common]
server_addr = IP
server_port = 端口号
token = 配对token，与服务端一致

[WireGuard_51820]  
type = udp
local_ip = wireguard服务机内网IP
local_port = 51820  
#本地端口
remote_port = 51820
#frp 服务端监听的端口