Docker Settings (docker.toml)
By default, the docker settings are located here:
/etc/kor-elf-shield/docker.tomlThe path to these settings can be changed in the main settings and can be found here (parameter docker).
A copy of the full settings file is here.
Attention: to work correctly Docker , you need to add the appropriate settings to the file. firewall.toml:
[[ips]]
ips = ["172.16.0.0/12"]
action = "accept"
directions = ["out", "in"]If you want stricter rules, you can configure them separately for each container firewall.toml. The main thing to remember is that the port to which the request is being sent will not inbe, but out. And if there is an interaction between containers, then you need to specify in . For example:
# backend
[[ips]]
ips = ["172.16.0.0/12"]
action = "accept"
directions = ["out"]
ports = ["3000", "5000", "9000", "8080"]
# mysql
[[ips]]
ips = ["172.16.0.0/12"]
action = "accept"
directions = ["in"]
ports = ["3306"]| Parameter | enabled |
| Meaning | true or false |
| By default | false |
| Description | Enables docker support. true - includes false - turns it off |
| Examples |
|
| *** | |
|---|---|
| Parameter | rule_strategy |
| Meaning | rebuild or incremental |
| By default | incremental |
| Description | A strategy for managing rules when starting or stopping containers in Docker: rebuild - with any change, all chains Docker are recreated entirely. incremental - only the rules of a specific container are added or removed. |
| Examples |
|