Skip to content

Use unprivileged ports within containers #30

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
theyoyojo merged 3 commits into from
Mar 19, 2024
Merged

Use unprivileged ports within containers #30

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
79f35f5
use unprivileged ports for nginx within the container always
charliemirabile Mar 16, 2024
308ba34
use unpriveleged ports for smtp within the container
charliemirabile Mar 16, 2024
5cd03ce
use unpriveleged ports for pop within the container
charliemirabile Mar 16, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 5 additions & 2 deletions container-compose-dev.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -92,14 +92,15 @@ services:
target: smtp
args:
hostname: localhost
LISTEN_PORT: 1465
volumes:
- type: bind
source: ./email
target: /mnt/email_data
read_only: false
selinux: z
ports:
- target: 465
- target: 1465
published: 11465
protocol: tcp
app_protocol: smtp
Expand All @@ -112,14 +113,16 @@ services:
additional_contexts:
- TCP_SERVER_SOURCE=./tcp_server
target: pop
args:
LISTEN_PORT: 1995
volumes:
- type: bind
source: ./email/mail
target: /mnt/mail
read_only: true
selinux: z
ports:
- target: 995
- target: 1995
published: 11995
protocol: tcp
app_protocol: pop3
Expand Down
19 changes: 13 additions & 6 deletions container-compose-staging.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,10 @@ services:
target: nginx
args:
NGINX_HOSTNAME: dev.underground.software
NGINX_HTTP_PORT: 1080
NGINX_HTTPS_PORT: 1443
NGINX_SMTPS_PORT: 1465
NGINX_POP3S_PORT: 1995
volumes:
- type: bind
source: ./ssl
Expand All @@ -20,25 +24,25 @@ services:
read_only: true
selinux: z
ports:
- target: 80
- target: 1080
published: 80
protocol: tcp
app_protocol: http
mode: host
name: "port for http connections to proxy"
- target: 443
- target: 1443
published: 443
protocol: tcp
app_protocol: https
mode: host
name: "port for https connections to proxy"
- target: 465
- target: 1465
published: 465
protocol: tcp
app_protocol: smtps
mode: host
name: "port for smtps connections to proxy"
- target: 995
- target: 1995
published: 995
protocol: tcp
app_protocol: pop3s
Expand Down Expand Up @@ -78,14 +82,15 @@ services:
target: smtp
args:
hostname: dev.underground.software
LISTEN_PORT: 1465
volumes:
- type: bind
source: ./email
target: /mnt/email_data
read_only: false
selinux: z
ports:
- target: 465
- target: 1465
published: 11465
protocol: tcp
app_protocol: smtp
Expand All @@ -98,14 +103,16 @@ services:
additional_contexts:
- TCP_SERVER_SOURCE=./tcp_server
target: pop
args:
LISTEN_PORT: 1995
volumes:
- type: bind
source: ./email/mail
target: /mnt/mail
read_only: true
selinux: z
ports:
- target: 995
- target: 1995
published: 11995
protocol: tcp
app_protocol: pop3
Expand Down
19 changes: 13 additions & 6 deletions container-compose.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,10 @@ services:
target: nginx
args:
NGINX_HOSTNAME: kdlp.underground.software
NGINX_HTTP_PORT: 1080
NGINX_HTTPS_PORT: 1443
NGINX_SMTPS_PORT: 1465
NGINX_POP3S_PORT: 1995
volumes:
- type: bind
source: ./ssl
Expand All @@ -20,25 +24,25 @@ services:
read_only: true
selinux: z
ports:
- target: 80
- target: 1080
published: 80
protocol: tcp
app_protocol: http
mode: host
name: "port for http connections to proxy"
- target: 443
- target: 1443
published: 443
protocol: tcp
app_protocol: https
mode: host
name: "port for https connections to proxy"
- target: 465
- target: 1465
published: 465
protocol: tcp
app_protocol: smtps
mode: host
name: "port for smtps connections to proxy"
- target: 995
- target: 1995
published: 995
protocol: tcp
app_protocol: pop3s
Expand Down Expand Up @@ -78,14 +82,15 @@ services:
target: smtp
args:
hostname: kdlp.underground.software
LISTEN_PORT: 1465
volumes:
- type: bind
source: ./email
target: /mnt/email_data
read_only: false
selinux: z
ports:
- target: 465
- target: 1465
published: 11465
protocol: tcp
app_protocol: smtp
Expand All @@ -98,14 +103,16 @@ services:
additional_contexts:
- TCP_SERVER_SOURCE=./tcp_server
target: pop
args:
LISTEN_PORT: 1995
volumes:
- type: bind
source: ./email/mail
target: /mnt/mail
read_only: true
selinux: z
ports:
- target: 995
- target: 1995
published: 11995
protocol: tcp
app_protocol: pop3
Expand Down