image: wg
network: true
config:
  capabilities:
    - CAP_NET_ADMIN
    - CAP_NET_RAW