add fail2ban as example container for testing purposes

Signed-off-by: Simon L <szaimen@e.mail.de>
This commit is contained in:
Simon L 2023-05-31 12:00:44 +02:00
parent c320da2b0e
commit f221ab7655
6 changed files with 41 additions and 3 deletions

View file

@ -39,7 +39,7 @@
},
"display_name": {
"type": "string",
"pattern": "^[A-Za-z ]+$"
"pattern": "^[A-Za-z 0-9]+$"
},
"environment": {
"type": "array",
@ -51,7 +51,7 @@
},
"container_name": {
"type": "string",
"pattern": "^nextcloud-aio-[a-z-]+$"
"pattern": "^nextcloud-aio-[a-z-0-9]+$"
},
"internal_port": {
"type": "string",

View file

@ -477,7 +477,9 @@ class DockerActionManager
}
// Disable arp spoofing
$requestBody['HostConfig']['CapDrop'] = ['NET_RAW'];
if (!in_array('NET_RAW', $capAdds, true)) {
$requestBody['HostConfig']['CapDrop'] = ['NET_RAW'];
}
if ($container->isApparmorUnconfined()) {
$requestBody['HostConfig']['SecurityOpt'] = ["apparmor:unconfined"];