mirror of
https://github.com/arthur-pbty/arthur-os.git
synced 2026-08-01 20:28:16 +02:00
David ZuckerandGitHub
858916783f
* Allow Docker DNS from 192.168 networks * Only add Docker DNS rule when UFW is active
22 lines
607 B
Bash
22 lines
607 B
Bash
# Allow nothing in, everything out
|
|
sudo ufw default deny incoming
|
|
sudo ufw default allow outgoing
|
|
|
|
# Allow ports for LocalSend
|
|
sudo ufw allow 53317/udp
|
|
sudo ufw allow 53317/tcp
|
|
|
|
# Allow Docker containers to use DNS on host
|
|
sudo ufw allow in proto udp from 172.16.0.0/12 to 172.17.0.1 port 53 comment 'allow-docker-dns'
|
|
sudo ufw allow in proto udp from 192.168.0.0/16 to 172.17.0.1 port 53 comment 'allow-docker-dns'
|
|
|
|
# Turn on the firewall
|
|
sudo ufw --force enable
|
|
|
|
# Enable UFW systemd service to start on boot
|
|
sudo systemctl enable ufw
|
|
|
|
# Turn on Docker protections
|
|
sudo ufw-docker install
|
|
sudo ufw reload
|