fix dev tun and sysctl ip_forward error

This commit is contained in:
Антон
2026-02-07 14:07:47 +03:00
parent f9df3f8d05
commit 6131bcaba9
2 changed files with 9 additions and 9 deletions

View File

@@ -7,23 +7,20 @@ if [ ! -c /dev/net/tun ]; then
chmod 600 /dev/net/tun
fi
# Enable IP forwarding
sysctl -w net.ipv4.ip_forward=1 || true
# Enable IP forwarding (moved to docker-compose.yml sysctls)
# sysctl -w net.ipv4.ip_forward=1 || true
# NAT MASQUERADE
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
# MSS Clamping (Path MTU Tuning)
# Works for both directions in one rule on the FORWARD chain
iptables -I FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
# Start OpenRC (needed for rc-service if we use it, but better to start openvpn directly or via rc)
# Since we are in Alpine, we can try to start the service if configured,
# but Container 4 main.py might expect rc-service to work.
openrc default
# Minimal OpenRC initialization to allow rc-service to work in Alpine
mkdir -p /run/openrc
touch /run/openrc/softlevel
# Start the APP_PROFILER API
# We use 0.0.0.0 to be reachable from other containers
python main.py

View File

@@ -59,7 +59,10 @@ services:
container_name: ovp-profiler
cap_add:
- NET_ADMIN
sysctls:
- net.ipv4.ip_forward=1
devices:
- "/dev/net/tun:/dev/net/tun"
ports:
- "8000:8000"