feat: #263 add registry firewall rule

ptah-sh · Nov 9, 2024 · 7530d8c · 7530d8c
1 parent 16070c2
commit 7530d8c
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/scripts/self-hosted/install-agent.sh b/scripts/self-hosted/install-agent.sh
@@ -121,6 +121,12 @@ if [ -z "$SKIP_CORE_INSTALL" ]; then
     iptables -I DOCKER-USER -p tcp -s 127.0.0.1 --dport 2019 -j ACCEPT
     iptables -I DOCKER-USER -p tcp --dport 2019 -j REJECT --reject-with tcp-reset
 
+    # Allow access to internal Docker Registry port
+    # Docker Registry will be available at registry.ptah.local:5000 on the overlay ptah_net network
+    iptables -I DOCKER-USER -p tcp -s 127.0.0.1 --dport 5050 -j ACCEPT
+    iptables -I DOCKER-USER -p tcp --dport 5050 -j REJECT --reject-with tcp-reset
+    echo '127.0.0.1 registry.ptah.local' >> /etc/hosts
+
     netfilter-persistent save
 
     rm -f /tmp/ptah-agent