Would it be possible to use ports 443 and 80 for both Adguard Home and Vaultwarden? They’re both on the same machine, Vaultwarden will be in a docker container and Adguard Home not. I’m doing this on an Ubuntu server.
Regarding macvlan’s with docker, I tried to use them in the past and while I liked the idea of having every container on it’s own mac /ip address in the home network space, I couldn’t get the host to communicate directly with them.
Everyone on the LAN could talk to my containers, except the host itself. IIRC there was/is some tricky part where you have to change the default route and create new iptables to make it work that way, but It seemed rather hacky and not secure at all.
Now that I’m a bit more experienced with docker and all, do you know if this is possible or still one of the downside of macvlan’s?
Edit: reference. I see he updated his post in 2023, maybe worth a new shot !!
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !selfhosted@lemmy.world
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.
Rules:
Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.
No spam posting.
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it’s not obvious why your post topic revolves around selfhosting, please include details to make it clear.
Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
Not OP, but thanks for the write up !
Regarding macvlan’s with docker, I tried to use them in the past and while I liked the idea of having every container on it’s own mac /ip address in the home network space, I couldn’t get the host to communicate directly with them.
Everyone on the LAN could talk to my containers, except the host itself. IIRC there was/is some tricky part where you have to change the default route and create new iptables to make it work that way, but It seemed rather hacky and not secure at all.
Now that I’m a bit more experienced with docker and all, do you know if this is possible or still one of the downside of macvlan’s?
Edit: reference. I see he updated his post in 2023, maybe worth a new shot !!
Yeah, I believe there’s some kind of bridge mode you must enable on the host’s interface.