diff --git a/services/reverse-proxy/docker-compose.yml b/services/reverse-proxy/docker-compose.yml index 9fec895..f16e0f3 100644 --- a/services/reverse-proxy/docker-compose.yml +++ b/services/reverse-proxy/docker-compose.yml @@ -12,6 +12,7 @@ services: LEGO_DISABLE_CNAME_SUPPORT: true networks: - reverse-proxy + - bridge - docker volumes: - ${NASCOMPOSE_SERVICES?}/reverse-proxy/volumes/traefik_acme:/etc/traefik/acme @@ -32,3 +33,6 @@ networks: docker: external: true + bridge: + name: bridge + external: true diff --git a/services/torrents/config/98-gateway-setup b/services/torrents/config/98-gateway-setup index 0b05681..b9236eb 100644 --- a/services/torrents/config/98-gateway-setup +++ b/services/torrents/config/98-gateway-setup @@ -14,3 +14,10 @@ ip route add ${wgserver%:*}/32 via ${gateway} dev eth0 echo "Allow DNS resolution locally" iptables -A INPUT -i eth0 -p udp -m udp --sport 53 -j ACCEPT iptables -A OUTPUT -o eth0 -p udp -m udp --dport 53 -j ACCEPT + +echo "Allow docker networks to connect" +docker_cirds=$(ip -o -4 route show proto kernel | awk '{print $1}') +for cidr in $docker_cirds; do + iptables -A INPUT -s "${cidr}" -d "${cidr}" -j ACCEPT + iptables -A OUTPUT -s "${cidr}" -d "${cidr}" -j ACCEPT +done