network_mode: 'service:tinc' depends_on: - wireguard build: context: . dockerfile: Dockerfile.wireguard_router cap_add: - NET_ADMIN restart: always