services:
  wg-target:
    build: ../wireguard
    cap_add:
      - NET_ADMIN
    sysctls:
      - net.ipv4.conf.all.src_valid_mark=1
    secrets:
      - source: wg-target
        target: wg-config

  wg-dummy:
    build: ../wireguard
    cap_add:
      - NET_ADMIN
    sysctls:
      - net.ipv4.conf.all.src_valid_mark=1
    secrets:
      - source: wg-dummy
        target: wg-config
  
  target:
    build:
      dockerfile: ./Dockerfile
      args:
        BIND_ADDRESS: "10.2.0.3"
    network_mode: "service:wg-target"

  dummy:
    build:
      dockerfile: ./Dockerfile
      args:
        BIND_ADDRESS: "10.2.0.6"
    network_mode: "service:wg-dummy"

secrets:
  wg-target:
    file: ./wg-target.conf
  
  wg-dummy:
    file: ./wg-dummy.conf