HelloZeroNet / HelloZeroNet/ZeroNet

TIP: How to host ZeroNet in a private IP container

未关闭
#103 0 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
主要语言
JavaScript
星标
18.8k
派生
2.3k
PR 合并指标
30 天内没有已合并 PR

描述

Not an issue, but I wasn't sure where to post this tip:

And, yes, I am aware that you may then want to protect your ZeroNet install(!)

Here is a typical configuration:
- Host machine runs haproxy
- ZeroNet in a Docker or OpenVZ container

1-Make the main UI available to the world:

In the container: `python zeronet.py --ui_ip 0.0.0.0`

On the host, you need to configure this container's IP in haproxy -- for instance, edit haproxy.conf:

```
frontend http_in
acl host_zeronet hdr(host) -i zeronet.example.com
use_backend be_zeronet if host_zeronet

backend be_zeronet
balance lastconn
option httpclose
server pub_zeronet :43110 cookie pub_zeronet check
```

Restart haproxy.

2-Make the file server available:

I would recommend using NAT to avoid any surprise. In /etc/../iptables:

nat:

```
# we will nat incoming packets on port 15441
-A PREROUTING -i eth0 -p tcp -m tcp --dport 15441 -j DNAT --to-destination :15441
-A PREROUTING -i eth0 -p udp -m udp --dport 15441 -j DNAT --to-destination :15441
```

filter:

```
# host forwards incoming container packets
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -s /24 -i -j ACCEPT
# host accepts incoming container packets to its own services
-A INPUT -s /24 -i -j ACCEPT
```

Cleanup your iptables configuration then `iptable-restore < etc/../iptable`

And you're good to go! (in theory)

贡献指南

这个仓库没有索引到贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。