diff --git a/charts/stable/wg-easy/Chart.yaml b/charts/stable/wg-easy/Chart.yaml
index 4e25444a165..ab205fa30db 100644
--- a/charts/stable/wg-easy/Chart.yaml
+++ b/charts/stable/wg-easy/Chart.yaml
@@ -9,7 +9,7 @@ annotations:
   truecharts.org/min_helm_version: "3.14"
   truecharts.org/train: stable
 apiVersion: v2
-appVersion: 14.0.0
+appVersion: 15.0.0
 dependencies:
   - name: common
     version: 25.4.10
@@ -36,5 +36,5 @@ sources:
   - https://ghcr.io/wg-easy/wg-easy
   - https://github.com/truecharts/charts/tree/master/charts/stable/wg-easy
 type: application
-version: 16.4.2
+version: 17.0.0
 
diff --git a/charts/stable/wg-easy/values.yaml b/charts/stable/wg-easy/values.yaml
index 768f2b4506b..ccdeba3b835 100644
--- a/charts/stable/wg-easy/values.yaml
+++ b/charts/stable/wg-easy/values.yaml
@@ -1,7 +1,7 @@
 image:
   repository: ghcr.io/wg-easy/wg-easy
   pullPolicy: IfNotPresent
-  tag: 14@sha256:66352ccb4b5095992550aa567df5118a5152b6ed31be34b0a8e118a3c3a35bf5
+  tag: 15.0.0@sha256:07ed8f95eeeb4082c2e6afe3f5f3991723f496a21dd2dc25860b119a728b9ab0
 securityContext:
   container:
     PUID: 0
@@ -40,19 +40,16 @@ workload:
             startup:
               type: tcp
           env:
-            WG_HOST: "localhost"
+            HOST: "0.0.0.0"
             PORT: "{{ .Values.service.main.ports.main.port }}"
-            WG_PORT: "{{ .Values.service.vpn.ports.vpn.port }}"
-            WG_MTU: 0
-            WG_PERSISTENT_KEEPALIVE: 0
-            WG_DEFAULT_ADDRESS: "10.8.0.x"
-            WG_DEFAULT_DNS: "1.1.1.1"
-            WG_ALLOWED_IPS: "0.0.0.0/0, ::/0"
-            # PASSWORD_HASH uses bcrypt. You can create a hash at https://bcrypt.online/
-            PASSWORD_HASH: "$2y$12$iPAVrWmmVshBbr6CpJWGw.wlpaulOsVMpb.Tdo53xnNrpZt.T9odK"
-            LANG: "en"
-            UI_TRAFFIC_STATS: "false"
+            INSECURE: false
 persistence:
   config:
     enabled: true
     mountPath: "/etc/wireguard"
+  modules:
+    enabled: true
+    hostPath: "/lib/modules"
+    mountPath: "/lib/modules"
+    readOnly: true
+    type: hostPath