version: "3.9"

networks:
  dns_net:
    external: true

services:
  ipsec-vpn:
    image: hwdsl2/ipsec-vpn-server
    container_name: ipsec-vpn
    restart: always
    env_file:
      - ./vpn.env
    volumes:
      - "./ikev2-vpn-data:/etc/ipsec.d"
      - "/lib/modules:/lib/modules:ro"
    ports:
      - "500:500/udp"
      - "4500:4500/udp"
    networks:
      - dns_net
    privileged: true