1. wg0.conf
2.  
3. [Interface]
4. Address = 10.xxx.xxx.xxx/32, fd7d:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/128
5. PrivateKey = <redacted>
6. MTU = 1320
7. DNS = 10.128.0.1, fd7d:76ee:e68f:a993::1
8. PostUp = DROUTE=$(ip route | grep default | awk '{print $3}'); HOMENET=192.168.0.0/16; HOMENET2=10.0.0.0/8; HOMENET3=172.16.0.0/12; ip route add $HOMENET3 via $DROUTE;ip route add $HOMENET2 via $DROUTE; ip route add $HOMENET via $DROUTE;iptables -I OUTPUT -d $HOMENET -j ACCEPT;iptables -A OUTPUT -d $HOMENET2 -j ACCEPT; iptables -A OUTPUT -d $HOMENET3 -j ACCEPT;  iptables -A OUTPUT ! -o %i -m mark ! --mark $(wg show %i fwmark) -m addrtype ! --dst-type LOCAL -j REJECT
9. PreDown = HOMENET=192.168.0.0/16; HOMENET2=10.0.0.0/8; HOMENET3=172.16.0.0/12; ip route del $HOMENET3 via $DROUTE;ip route del $HOMENET2 via $DROUTE; ip route del $HOMENET via $DROUTE; iptables -D OUTPUT ! -o %i -m mark ! --mark $(wg show %i fwmark) -m addrtype ! --dst-type LOCAL -j REJECT; iptables -D OUTPUT -d $HOMENET -j ACCEPT; iptables -D OUTPUT -d $HOMENET2 -j ACCEPT; iptables -D OUTPUT -d $HOMENET3 -j ACCEPT
10.  
11.  
12. [Peer]
13. PublicKey = <redacted>
14. PresharedKey = <redacted>
15. Endpoint = america.vpn.airdns.org:1637
16. AllowedIPs = 0.0.0.0/0, ::/0
17. PersistentKeepalive = 15
18.  
19. ---
20. docker-compose.yaml - IPv6 works, real IPv6 address not exposed
21.  
22. version: "3.9"
23. services:
24.   airvpn:
25.     image: linuxserver/wireguard:latest
26.     container_name: airvpn
27.     cap_add:
28.      - NET_ADMIN
29.     environment:
30.      - PUID=1000
31.       - PGID=1000
32.       - TZ=America/Los_Angeles
33.     volumes:
34.      - ./airvpn/wg0.conf:/config/wg0.conf
35.       - /lib/modules:/lib/modules
36.     sysctls:
37.       net.ipv4.conf.all.src_valid_mark: 1
38.       net.ipv6.conf.all.disable_ipv6: 0
39.     ports:
40.      - 9091:9091
41.     privileged: true
42.     restart: always
43.  
44.   transmission:
45.     image: linuxserver/transmission:latest
46.     container_name: transmission
47.     network_mode: service:airvpn
48.     depends_on:
49.      - airvpn
50.     volumes:
51.      - ./transmission/config:/config:rw
52.       - /downloads:/downloads:rw
53.     environment:
54.      - PUID=1000
55.       - PGID=1000
56.       - TZ=America/Los_Angeles
57.     env_file:
58.      - ./.env
59.     restart: always
60.  
61. ---
62. deployment.yaml for Kubernetes - real IPv6 address is exposed
63.  
64. apiVersion: apps/v1
65. kind: Deployment
66. metadata:
67.   name: bittorrent
68.   annotations:
69.     keel.sh/policy: all
70.     security.alpha.kubernetes.io/unsafe-sysctls: net.ipv4.conf.all.src_valid_mark=1
71.     security.alpha.kubernetes.io/unsafe-sysctls: net.ipv6.conf.all.disable_ipv6=0
72. spec:
73.   replicas: 1
74.   selector:
75.     matchLabels:
76.       app: bittorrent
77.   template:
78.     metadata:
79.       labels:
80.         app: bittorrent
81.     spec:
82.       nodeSelector:
83.         kubernetes.io/hostname: obsidiana
84.       containers:
85.       - name: airvpn
86.         image: linuxserver/wireguard:latest
87.         securityContext:
88.           privileged: true
89.           capabilities:
90.             add: ["NET_ADMIN"]
91.         env:
92.         - name: PUID
93.           value: "1000"
94.         - name: PGID
95.           value: "1000"
96.         - name: TZ
97.           value: America/Los_Angeles
98.         ports:
99.         - containerPort: 9091
100.         volumeMounts:
101.         - name: airvpn-config
102.           mountPath: /etc/wireguard/wg0.conf
103.           subPath: wg0.conf
104.         - name: lib-modules
105.           mountPath: /lib/modules
106.       - name: transmission
107.         image: linuxserver/transmission:latest
108.         livenessProbe:
109.           httpGet:
110.             path: /rpc
111.             port: 9091
112.         env:
113.         - name: PUID
114.           value: "1000"
115.         - name: PGID
116.           value: "1000"
117.         - name: TZ
118.           value: America/Los_Angeles
119.         - name: USER
120.           valueFrom:
121.             secretKeyRef:
122.               name: transmission-secrets
123.               key: USER
124.         - name: PASS
125.           valueFrom:
126.             secretKeyRef:
127.               name: transmission-secrets
128.               key: PASS
129.         volumeMounts:
130.         - name: transmission-config
131.           mountPath: /config
132.         - name: downloads
133.           mountPath: /downloads
134.       volumes:
135.       - name: transmission-config
136.         hostPath:
137.           path: /srv/bittorrent/transmission/config
138.       - name: airvpn-config
139.         configMap:
140.           name: airvpn-config
141.       - name: lib-modules
142.         hostPath:
143.           path: /lib/modules
144.       - name: downloads
145.         hostPath:
146.           path: /downloads
147.  
148.