Fix ACCEPT_CLIENTS

[oschwartz10612]

ACCEPT_CLIENTS gets overridden by the cli arg

[Lokowitz]

I also noticed that --native is not working with docker for me, only with native newt installation.
After adding --cap-add=NET_ADMIN it works.

I am not a pro but i saw in other projects that they also use these commands:

  --cap-add=SYS_MODULE
  --sysctl="net.ipv4.conf.all.src_valid_mark=1"
  --sysctl="net.ipv4.ip_forward=1"

Docker logs without --cap-add=NET_ADMIN

INFO: 2025/08/08 11:54:44 Received WireGuard clients configuration from remote server
FATAL: 2025/08/08 11:54:44 Failed to create WireGuard interface: operation not permitted

[oschwartz10612]

Yeah should add this to the docs. Because its a native WG tunnel the container namespace needs that permission.