remove rp_filter stuff

This commit is contained in:
mrhotio 2025-12-23 07:31:45 +01:00
parent a903f09a37
commit e253fa094e
2 changed files with 1 additions and 7 deletions

View File

@ -2,7 +2,7 @@
2. If you need to expose ports on your LAN you can use `VPN_EXPOSE_PORTS_ON_LAN`. For example `VPN_EXPOSE_PORTS_ON_LAN=7878/tcp,9117/tcp`, will block those ports on the vpn interface, so that there's no risk that they might be exposed to the world and allow access to them from your LAN. Most images also have a `WEBUI_PORTS` environment variable that does basically the same thing already pre-filled with the default ports. Use `WEBUI_PORTS` if you need to change those defaults. The variable `VPN_EXPOSE_PORTS_ON_LAN` is mostly for extra ports, likely used when routing additional containers through this container's VPN connection.
3. If the container fails, you'll have to add this.
3. NOT USED
4. Possible values are `generic`, `proton` and `pia`.
Affiliate links:

View File

@ -33,7 +33,6 @@
-e UNBOUND_ENABLED="false" \ #(21)
-e UNBOUND_NAMESERVERS="" \ #(22)
--cap-add=NET_ADMIN \
--sysctl="net.ipv4.conf.all.rp_filter=2" \ # OPTIONAL(3)
--sysctl="net.ipv6.conf.all.disable_ipv6=1" \ # OPTIONAL(9)
...
```
@ -63,7 +62,6 @@
cap_add:
- NET_ADMIN
sysctls:
- net.ipv4.conf.all.rp_filter=2 # OPTIONAL(3)
- net.ipv6.conf.all.disable_ipv6=1 # OPTIONAL(9)
...
```
@ -91,7 +89,6 @@
-e UNBOUND_ENABLED="false" \ #(21)
-e UNBOUND_NAMESERVERS="" \ #(22)
--cap-add=NET_ADMIN \
--sysctl="net.ipv4.conf.all.rp_filter=2" \ # OPTIONAL(3)
--sysctl="net.ipv6.conf.all.disable_ipv6=1" \ # OPTIONAL(9)
...
```
@ -121,7 +118,6 @@
cap_add:
- NET_ADMIN
sysctls:
- net.ipv4.conf.all.rp_filter=2 # OPTIONAL(3)
- net.ipv6.conf.all.disable_ipv6=1 # OPTIONAL(9)
...
```
@ -154,7 +150,6 @@
-e UNBOUND_ENABLED="false" \ #(21)
-e UNBOUND_NAMESERVERS="" \ #(22)
--cap-add=NET_ADMIN \
--sysctl="net.ipv4.conf.all.rp_filter=2" \ # OPTIONAL(3)
--sysctl="net.ipv6.conf.all.disable_ipv6=1" \ # OPTIONAL(9)
...
```
@ -189,7 +184,6 @@
cap_add:
- NET_ADMIN
sysctls:
- net.ipv4.conf.all.rp_filter=2 # OPTIONAL(3)
- net.ipv6.conf.all.disable_ipv6=1 # OPTIONAL(9)
...
```