services:
  wg:
    image: ghcr.io/raylas/wg-peer:latest
    cap_add:
    - NET_ADMIN
    - SYS_MODULE
    sysctls:
      net.ipv4.conf.all.src_valid_mark: 1
    network_mode: bridge
    ports:
    - 9091:9091
    environment:
      INTERFACE: wg0
    volumes:
    - ./wg0.conf:/etc/wireguard/wg0.conf
  
  transmission:
    image: linuxserver/transmission:latest
    network_mode: "service:wg"

Key bits:

• Tunnel service uses network_mode: bridge
• Tunneled services use network_mode: "service:wg"

In this case, the transmission service will use the wg service as its default gateway. Whereas the wg service will route its internet-bound traffic via the local host's bridge network.

Port forwarding for transmission is configured on the wg service for local access.

References:

• network_mode spec
• wg-peer

Bookmarked

So long, home T1 line; hello, hacking the T1 router
http://oldvcr.blogspot.com/2022/05/so-long-home-t1-line-hello-hacking-t1.html?m=1

• Copper, T1s, smartjacks!

Teleforking a process onto a different computer!
https://thume.ca/2020/04/18/telefork-forking-a-process-onto-a-different-computer/

• Using Rust to "telefork" a process—for fun.