Continued smol brain adventures in Docker
So I managed to get Docker set up (I think) with the help of a script called Deployrr, then used the linuxserver.io docker file thing.
The plex media server runs and I can see all my content in the web UI, however none of the plex apps can connect to it.
Can anyone help point me in the right direction to fix this without doxxing myself?
Firewall. If you can connect to it locally but not externally it is the first thing I would check.
ⓘ This user is suspected of being a cat. Please report any suspicious behavior.
Okay, so if I disable the firewall or set Default Incoming Policy to allow, it works great.
I’m pretty sure that’s a bad idea, though…
That is a bad idea. Can you set specific ports to be allowed? If so it should be port 32400 per the Plex docs.
ⓘ This user is suspected of being a cat. Please report any suspicious behavior.
Nice! I got that tcp port added and it connects
5 seconds later…
Doesn’t docker bypass firewalls like UFW by modifying iptables directly?
I know they use iptables to do their stuff, but does it make them open like that? Sounds like a terrible idea to me. Docker can’t know if I want that port to be open to the entire world or just locally.
ⓘ This user is suspected of being a cat. Please report any suspicious behavior.
It does that when you expose container ports unless you explicitly bind them to localhost and yes it’s a terrible idea.
Oh yeah I was similarly shocked when I first learned that even if you block a port in your firewall docker says no you’re open. If you’re just doing it on your home network and not port forwarding it in your router and exposing to to WAN I guess it’s not so bad
It might be specific to UFW?
Edit: No the docker docs state also firewalld. And presumably if you’re making the firewall rules yourself, depending on how you can also fall into the same trap.
Edit 2: and bazzite potentially uses firewalld
ⓘ This user is suspected of being a cat. Please report any suspicious behavior.