services: wireguard: build: ../wireguard cap_add: - NET_ADMIN sysctls: - net.ipv4.conf.all.src_valid_mark=1 secrets: - wg-config victim: build: ./ network_mode: "service:wireguard" secrets: wg-config: file: ./wireguard.conf