updated with vpn

vars.yml

@@ -9,6 +9,7 @@ directories:
   - /opt/apps/prowler/data
   - /opt/apps/prowler/tmp/prowler_api_output
   - /opt/apps/prowler/postgres/data
+  - /opt/apps/wireguard
 #   - /opt/apps/wazuh/config
 #   - /opt/apps/wazuh/filebeat_etc
 #   - /opt/apps/wazuh/filebeat_var
@@ -27,6 +28,7 @@ images:
 #  - docker.n8n.io/n8nio/n8n
   - docker.gitea.com/gitea:nightly
   - docker.io/wazuh/wazuh-certs-generator:0.0.3
+  - ghcr.io/wg-easy/wg-easy:15
   # - docker.io/wazuh/wazuh-dashboard:{{ wazah_version }}
   # - docker.io/wazuh/wazuh-indexer:{{ wazah_version }}
   # - docker.io/wazuh/wazuh-manager:{{ wazah_version }}
@@ -39,3 +41,18 @@ POSTGRES_ADMIN_USER: theuseriwant
 POSTGRES_PASSWORD: theuserthatineedpaswoord
 POSTGRES_DB: thatoneit
 
+## WireGuard Easy VPN
+## IMPORTANT: After first run, change wireguard_ui_password to a strong password
+## Public IP or DDNS hostname clients connect to — CHANGE THIS before deploying
+wireguard_image: ghcr.io/wg-easy/wg-easy:15
+wireguard_host: CHANGE_ME
+wireguard_ui_username: admin
+wireguard_ui_password: CHANGE_ME
+wireguard_port: 51820
+wireguard_ui_port: 51821
+wireguard_cidr: 10.10.1.0/24
+wireguard_ipv6_cidr: fd00:10:10::/64
+wireguard_allowed_ips: 10.10.1.0/24,10.10.0.0/24
+wireguard_default_dns: 1.1.1.1
+wireguard_ip: 10.10.0.36
+