feat: server-core → network_mode host for direct WireGuard routing

- docker-compose.yml: server-core uses host network (no bridge isolation) - docker-compose.yml: postgres/redis expose ports on 127.0.0.1 only - docker-compose.dev.yml: also uses host network - WireGuard now runs on host network stack (wg show works on host) - nftables rules apply directly to host (proper peer isolation)
2026-05-28 13:31:24 +07:00
parent 4a5651651b
commit 31707cfaef
2 changed files with 10 additions and 11 deletions
@@ -1,4 +1,3 @@
-
 services:
  server-core:
    build:
@@ -8,5 +7,6 @@ services:
    command: ["sh", "-c", "go install github.com/air-verse/air@latest && air"]
    volumes:
      - ./apps/server-core:/app
+    network_mode: host
    environment:
-      - GIN_MODE=debug
+      - GIN_MODE=debug