Waarom deze configuratie?
- Echte data-soevereiniteit: 100% AVG/GDPR compliant. Lokale gegevens en configuratie blijven op eigen hardware zonder cloud-afhankelijkheid.
- Hardware agnostisch: Geoptimaliseerd voor Raspberry Pi 5 (ARM64) en Proxmox VE hypervisors (x86_64 LXC & VM).
- Engine vrijheid: Getest en gevalideerd voor Docker CE en rootless Podman zonder root-privileges.
- Platform verificatie: Requires NET_ADMIN capability and /dev/net/tun device.
Snelle Start (Standalone Docker Compose)
Onderstaand compose-fragment is direct te gebruiken in elke Docker- of Podman-omgeving:
services:
gluetun:
image: "ghcr.io/qdm12/gluetun:latest"
container_name: njorddeploy-gluetun
cap_add:
- NET_ADMIN
devices:
- /dev/net/tun:/dev/net/tun
ports:
- "8000:8000/tcp" # Gluetun control server API
- "8888:8888/tcp" # HTTP proxy
- "8388:8388/tcp" # Shadowsocks TCP
- "8388:8388/udp" # Shadowsocks UDP
volumes:
- "./data/gluetun:/gluetun"
environment:
- "VPN_SERVICE_PROVIDER=custom"
- "VPN_TYPE=wireguard"
- "WIREGUARD_PRIVATE_KEY=wireguard_private_key"
- "WIREGUARD_ADDRESSES=wireguard_addresses"
- "VPN_ENDPOINT_IP=vpn_endpoint_ip"
- "VPN_ENDPOINT_PORT=51820"
- "TZ=Etc/UTC"
- "PUID=1000"
- "PGID=1000"
user: "0:0"
networks:
- njorddeploy_net
networks:
njorddeploy_net:
Start de service direct via de commandline: docker compose up -d
Configuratie & Omgevingsvariabelen
Belangrijkste configuratieparameters en standaardwaarden uit de NjordDeploy component-sjabloon:
| Variable | Default Value | Description |
|---|---|---|
GLUETUN_CONTROL_PORT |
8000 |
The port for Gluetun's internal control server API. |
GLUETUN_HTTP_PROXY_PORT |
8888 |
The port for the built-in HTTP proxy server. |
GLUETUN_SHADOWSOCKS_PORT |
8388 |
The port for the built-in Shadowsocks proxy server (TCP and UDP). |
VPN_SERVICE_PROVIDER |
custom |
Your VPN service provider (e.g., ivpn, nordvpn, private internet access, custom). |
VPN_TYPE |
wireguard |
The VPN protocol type (e.g., openvpn, wireguard). |
WIREGUARD_PRIVATE_KEY |
*None* |
Your Wireguard private key, if using Wireguard. |
WIREGUARD_ADDRESSES |
*None* |
Your Wireguard IP addresses (e.g., 172.16.0.1/32), if using Wireguard. |
VPN_ENDPOINT_IP |
*None* |
The IP address of your VPN server endpoint. Required for 'custom' provider. |
VPN_ENDPOINT_PORT |
51820 |
The port of your VPN server endpoint. Required for 'custom' provider. |
TZ |
Etc/UTC |
Container timezone (e.g., Europe/London, America/New_York). |
PUID |
1000 |
User ID for permissions. Set to 0 for root if experiencing permission issues. |
PGID |
1000 |
Group ID for permissions. Set to 0 for root if experiencing permission issues. |
Ecosysteem & Bedrijfsintegratie
- Reverse Proxy Klaar: Direct te koppelen met Caddy, Traefik of Nginx Proxy Manager inclusief automatische Let's Encrypt TLS.
- Veilige Remote Toegang: Naadloos te combineren met WireGuard of Tailscale/Headscale voor veilige toegang buiten het lokale netwerk.
- Transactieve Back-ups: Geschikt voor point-in-time database dumps en container-safe volume snapshotting via NjordDeploy.
Eenvoudig beheren via NjordDeploy
Installeer, bewaak en update deze service met 1 klik op uw eigen Raspberry Pi of Proxmox server via de NjordDeploy Configurator.