134
edits
Mich181189 (talk | contribs) |
Mich181189 (talk | contribs) |
||
Line 171: | Line 171: | ||
= Current VMs = | = Current VMs = | ||
=== | === replacement-services === | ||
This hosts irccat and a few other things. | |||
It can run docker containers, with the subnet 10.0.24.0/23 forwarded to it via a static route for this use case. | |||
The network was created with this command: | |||
docker network create --ipv6 --driver bridge --subnet=10.0.24.0/23 --subnet=2a00:1d40:1843:1a4::/64 --opt "com.docker.network.bridge.name"="dockerexternal" external | |||
there were a few IPTables tricks involved as well to allow forwarding. This basically needed this file in /etc/iptables/rules.v4 | |||
*filter | |||
:DOCKER-USER - [0:0] | |||
-I DOCKER-USER -i ens18 -o dockerexternal -j ACCEPT | |||
COMMIT | |||
as well as | |||
sudo apt-get install iptables-persistent netfilter-persistent | |||
A docker-compose file such as this could be used to place a container on this externally accessible network: | |||
version: "3" | |||
services: | |||
dash: | |||
image: acnode-dashboard | |||
environment: | |||
- MQTT_SERVER=mqtt.lan.london.hackspace.org.uk:1883 | |||
- LISTEN_ADDR=:8080 | |||
networks: | |||
- external | |||
networks: | |||
external: | |||
external: | |||
name: external | |||
=== Scheduled Services === | === Scheduled Services === |