AR2000/crowdsec-legacy-firewall-bouncer
1
0
Fork 0
Code Issues Pull Requests Actions Packages Releases Activity

ip6tables

Browse Source
This commit is contained in:
AR2000
2025-01-03 14:11:52 +01:00
parent b515751d4a
commit c7693eae1f
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
Dockerfile
View File

@@ -9,9 +9,11 @@ EOF
FROM iptables AS iptables-legacy FROM iptables AS iptables-legacy
RUN update-alternatives --set iptables /usr/sbin/iptables-legacy RUN update-alternatives --set iptables /usr/sbin/iptables-legacy
RUN update-alternatives --set ip6tables /usr/sbin/ip6tables-legacy
FROM iptables AS iptables-nft FROM iptables AS iptables-nft
RUN update-alternatives --set iptables /usr/sbin/iptables-nft RUN update-alternatives --set iptables /usr/sbin/iptables-nft
RUN update-alternatives --set ip6tables /usr/sbin/ip6tables-nft
FROM golang:1.21.4 AS build-stage FROM golang:1.21.4 AS build-stage
WORKDIR /app WORKDIR /app
@@ -27,7 +29,7 @@ COPY --from=build-stage /app/cs-custom-bouncer/crowdsec-custom-bouncer \
COPY --from=build-stage /app/cs-custom-bouncer/config/crowdsec-custom-bouncer.yaml \ COPY --from=build-stage /app/cs-custom-bouncer/config/crowdsec-custom-bouncer.yaml \
/crowdsec-custom-bouncer.yaml /crowdsec-custom-bouncer.yaml
ADD --chmod=770 bouncer.sh /bouncer.sh ADD --chmod=770 bouncer.sh /bouncer.sh
ENV BINARY_PATH=/bouncer.yaml ENV BINARY_PATH=/bouncer.sh
#prometheus port #prometheus port
LABEL me.ar2000.gitea.buildargs.iptablesmode="${IPTABLES_MODE}" LABEL me.ar2000.gitea.buildargs.iptablesmode="${IPTABLES_MODE}"
CMD ["/usr/bin/crowdsec-custom-bouncer", "-c", "/crowdsec-custom-bouncer.yaml"] CMD ["/usr/bin/crowdsec-custom-bouncer", "-c", "/crowdsec-custom-bouncer.yaml"]