jack/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: add front network to tools stack for Docker port binding
Some checks failed
CI/CD / syntax-check (push) Successful in 1m11s
Details
CI/CD / deploy (push) Failing after 1m45s
Details

Browse source 
Docker 29.x does not create DNAT rules for containers only on internal
networks. Add a non-internal 'front' network that outline and n8n join
alongside their internal networks, enabling host port binding to work.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
jack 2026-03-22 15:10:52 +07:00
parent 28f8c76433
commit a7b14759af
1 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
roles/tools/templates/docker-compose.yml.j2
View file

@ -2,6 +2,10 @@
# Do not edit manually; re-run ansible-playbook playbooks/tools.yml # Do not edit manually; re-run ansible-playbook playbooks/tools.yml
networks: networks:
# front — non-internal: needed for Docker port binding to work (expose ports to host)
# Docker does not create DNAT rules for containers only on internal networks
front:
driver: bridge
outline-internal: outline-internal:
driver: bridge driver: bridge
internal: true internal: true
@ -24,6 +28,7 @@ services:
env_file: .env env_file: .env
networks: networks:
- outline-internal - outline-internal
- front # needed for host port binding
ports: ports:
# Exposed only to main Traefik (access controlled by UFW) # Exposed only to main Traefik (access controlled by UFW)
- "{{ ip_tools }}:3000:3000" - "{{ ip_tools }}:3000:3000"
@ -92,6 +97,7 @@ services:
restart: unless-stopped restart: unless-stopped
networks: networks:
- n8n-internal - n8n-internal
- front # needed for host port binding
ports: ports:
# Exposed only to main Traefik (access controlled by UFW) # Exposed only to main Traefik (access controlled by UFW)
- "{{ ip_tools }}:5678:5678" - "{{ ip_tools }}:5678:5678"