agentleFS
Sign inStart free
jackson2wjackson2w/claude-code-skills/docker-vpn-killswitch-lxc/SKILL.md

docker-vpn-killswitch-lxc

Skill1 starsChanged 9 days agoNo licenceView on GitHub

Route only some Docker containers (downloaders such as yt-dlp, MeTube, Pinchflat) out through a commercial WireGuard VPN (ProtonVPN, Mullvad, etc.) from inside an unprivileged Proxmox LXC, with a two-layer kill switch so they can never fall back to the ISP: WireGuard `Table = off`, a dedicated Docker bridge with a fixed name, source-based ip rules into a routing table whose only permanent route is `unreachable`, and an nftables forward-hook drop in its own table. The rest of the LXC (Tailscale, Jellyfin, SMB, apt) stays on the LAN. Covers sanitising the provider's .conf, unit ordering, DNS, Tailscale's ip rules, and the two drills that prove each layer works alone. Trigger phrases include "VPN kill switch", "route docker through wireguard", "containers only through the VPN", "ProtonVPN for the downloaders", "no ISP fallback", "Table = off", "policy routing for a docker network", "split tunnel docker", "gluetun alternative", "wg-quick in an LXC".

The file

We split this skill into the rules it gives an agent

2 rules. About 0 are common, 0 are distinctive, and 2 are very specific to this project.

  • ≈0

    Common · estimate

    Many files like this have a rule of this kind.

  • ≈0

    Distinctive · estimate

    This author's own choices. Worth a look.

  • 2

    Very specific

    Tied to their project's names, files or tools. Probably skip.

No licence file, so all rights are reserved — read it at the source. We count its rules but don't quote them. Read them on GitHub.

≈ “Common” is an estimate: at least 1 in 5 of the 350,495 skill files we read have a rule of the same kind, not the same words. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.

Does it work?

Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.

Reviews can't be read right now.

Your trail

Files you open will collect here, so you can find them again.

Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.

Now do this for your own.

Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

Check your setup, free