thomas/docker-server
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Add network description to readme.

Browse Source
This commit is contained in:
Thomas Lovén 2021-08-21 23:29:17 +02:00
parent 71a8127105
commit 7fb637509b
1 changed files with 41 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

41
README.md
View File

@ -17,6 +17,47 @@ TRAEFIK_CERTIFICATERESOLVERS_LE_ACME_EMAIL=...
The value of those depend on your setup and can be found in the Traefik and Authelia documentation. The value of those depend on your setup and can be found in the Traefik and Authelia documentation.
## Networks
For the docker setup of my home server, I have create four specific docker networks
### LAN
A macvlan network with full network and internet access
Containers on this network will be provided an IP on my local home LAN and have direct access to it as if they were using the Host network setting.
Containers get IPs in the range 192.168.1.128-192.168.1.254
```
subnet: 192.168.1.0/23
range: 192.168.1.128/25
gateway: 192.168.0.1
parent: eno1
```
### IOT
A macvlan set to my VLAN for IOT things. Machines on this do not have access to the LAN or to the internet, with a few exceptions (ex. NTP server access).
Containers get IPs in the range 192.168.2.9-192.168.2.127
```
subnet: 192.168.2.0/24
range: 192.168.2.0/25
gateway: 192.168.2.1
parent: eno1:10
```
### GUEST
A macvlan set to my VLAN for guest WIFI. Machines on this have access to the internet, but not to the local LAN.
```
subnet: 192.168.5.0/24
range: 192.168.5.0/26
gateway: 192.168.2.1
parent: eno1:20
```
### WEB
A bridge network for containers that shall be accessible by web interface. Routed by Traefik.
## Lessons learned ## Lessons learned
- Authelia will ONLY work with https. Both the authelia url itself and the one being authenticated must be https. - Authelia will ONLY work with https. Both the authelia url itself and the one being authenticated must be https.