Docker: Add the option for host specific iptables rules

OpenConext · Feb 2, 2025 · f87e2f1 · f87e2f1
1 parent 12e7b56
commit f87e2f1
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/roles/docker/templates/ip4tables.sh.j2 b/roles/docker/templates/ip4tables.sh.j2
@@ -90,6 +90,13 @@ done
 /sbin/iptables -t filter -A INPUT -p {{ service.protocol | default('tcp') }} {{ '-s '+service.source if service.source is defined else '' }} -m multiport --dports {{ service.port }} -j ACCEPT
 {% endfor %}
 {% endif %}
+{% if iptables_hostspecific is defined %}
+{% for service in iptables_hostspecific %}
+{{'##'|e }} {{ service.name }}
+{{'##'|e }} {{'=' * service.name|length }}
+/sbin/iptables -t filter -A INPUT -p {{ service.protocol | default('tcp') }} {{ '-s '+service.source if service.source is defined else '' }} -m multiport --dports {{ service.port }} -j ACCEPT
+{% endfor %}
+{% endif %}
 
 /sbin/iptables -t filter -A INPUT -m state --state ESTABLISHED -j ACCEPT
 /sbin/iptables -t filter -A INPUT -j DROP