From 858916783f58828fd12c317076e5ddb5279e5cae Mon Sep 17 00:00:00 2001 From: David Zucker Date: Wed, 29 Apr 2026 21:10:02 +0900 Subject: [PATCH] Allow Docker DNS from 192.168 networks (#5465) * Allow Docker DNS from 192.168 networks * Only add Docker DNS rule when UFW is active --- install/first-run/firewall.sh | 1 + migrations/1777282771.sh | 5 +++++ 2 files changed, 6 insertions(+) create mode 100644 migrations/1777282771.sh diff --git a/install/first-run/firewall.sh b/install/first-run/firewall.sh index cc187dc2..96210c8b 100644 --- a/install/first-run/firewall.sh +++ b/install/first-run/firewall.sh @@ -8,6 +8,7 @@ sudo ufw allow 53317/tcp # Allow Docker containers to use DNS on host sudo ufw allow in proto udp from 172.16.0.0/12 to 172.17.0.1 port 53 comment 'allow-docker-dns' +sudo ufw allow in proto udp from 192.168.0.0/16 to 172.17.0.1 port 53 comment 'allow-docker-dns' # Turn on the firewall sudo ufw --force enable diff --git a/migrations/1777282771.sh b/migrations/1777282771.sh new file mode 100644 index 00000000..b350376f --- /dev/null +++ b/migrations/1777282771.sh @@ -0,0 +1,5 @@ +echo "Allow Docker DNS from Docker's 192.168 address pool" + +if omarchy-cmd-present ufw && sudo ufw status | grep -q "Status: active"; then + sudo ufw allow in proto udp from 192.168.0.0/16 to 172.17.0.1 port 53 comment 'allow-docker-dns' +fi