From c5dc3db2bebe3cc9dc15f104272f07a9e2eebe99 Mon Sep 17 00:00:00 2001 From: Jef Roosens Date: Thu, 16 Dec 2021 10:18:17 +0100 Subject: [PATCH] Tried adding proper IPv6 support --- roles/docker/files/daemon.json | 4 +++- roles/networking/tasks/main.yml | 9 +++++++++ 2 files changed, 12 insertions(+), 1 deletion(-) diff --git a/roles/docker/files/daemon.json b/roles/docker/files/daemon.json index 123edbc..39cfead 100644 --- a/roles/docker/files/daemon.json +++ b/roles/docker/files/daemon.json @@ -2,5 +2,7 @@ "metrics-addr" : "0.0.0.0:9323", "experimental" : true, "mtu": 1450, - "network-control-plane-mtu": 1450 + "network-control-plane-mtu": 1450, + "ipv6": true, + "fixed-cidr-v6": "fd00::/80" } diff --git a/roles/networking/tasks/main.yml b/roles/networking/tasks/main.yml index 61286b8..f196760 100644 --- a/roles/networking/tasks/main.yml +++ b/roles/networking/tasks/main.yml @@ -34,6 +34,15 @@ - 4789 # overlay network traffic - 9001 # Portainer communication +# - name: Open up ports for proper IPv6 service communication +# community.general.ufw: +# rule: allow +# port: "{{ item }}" +# loop: +# - 80 # HTTP +# - 443 # HTTPS +# - 8000 # Portainer edge communication + - name: Block everything else by default & enable firewall. community.general.ufw: default: deny