diff --git a/init/configure-firewalld b/init/configure-firewalld index 4a45489..d08de90 100644 --- a/init/configure-firewalld +++ b/init/configure-firewalld @@ -40,6 +40,15 @@ firewall-cmd --zone=internal --add-forward-port=port=80:proto=udp:toport=8080 -- firewall-cmd --zone=internal --add-forward-port=port=443:proto=tcp:toport=4443 --permanent firewall-cmd --zone=internal --add-forward-port=port=443:proto=udp:toport=4443 --permanent +firewall-cmd --add-rich-rule='rule family=ipv6 forward-port port=80 protocol=tcp to-port=8080' --permanent +firewall-cmd --add-rich-rule='rule family=ipv6 forward-port port=80 protocol=udp to-port=8080' --permanent +firewall-cmd --add-rich-rule='rule family=ipv6 forward-port port=443 protocol=tcp to-port=4443' --permanent +firewall-cmd --add-rich-rule='rule family=ipv6 forward-port port=443 protocol=udp to-port=4443' --permanent +firewall-cmd --zone=internal --add-rich-rule='rule family=ipv6 forward-port port=80 protocol=tcp to-port=8080' --permanent +firewall-cmd --zone=internal --add-rich-rule='rule family=ipv6 forward-port port=80 protocol=udp to-port=8080' --permanent +firewall-cmd --zone=internal --add-rich-rule='rule family=ipv6 forward-port port=443 protocol=tcp to-port=4443' --permanent +firewall-cmd --zone=internal --add-rich-rule='rule family=ipv6 forward-port port=443 protocol=udp to-port=4443' --permanent + firewall-cmd --reload mv /root/jail.local /etc/fail2ban/jail.local diff --git a/quadlets/nginx/nginx.network b/quadlets/nginx/nginx.network new file mode 100644 index 0000000..c39fda0 --- /dev/null +++ b/quadlets/nginx/nginx.network @@ -0,0 +1,4 @@ +[Network] +DisableDNS=true +IPv6=true +NetworkName=nginx diff --git a/quadlets/nginx/nginx.pod b/quadlets/nginx/nginx.pod index 7451216..9af1c0f 100644 --- a/quadlets/nginx/nginx.pod +++ b/quadlets/nginx/nginx.pod @@ -1,4 +1,5 @@ [Pod] +Network=nginx PodName=nginx PublishPort=8080:80/tcp PublishPort=8080:80/udp