search

miekg / pgo

container gitops in a simple way
GNU General Public License v3.0
11 stars 1 forks source link

check allowed networks #33

Closed miekg closed 3 months ago

miekg commented 1 year ago

Having a (caddy) proxy works to allow connectivity to each container, but maybe you want to limit which services can connect to what network?

this means a network option in the config, and disallow any config that wants more networks, in similar vain as ports.

miekg commented 1 year ago

having implemented the networks option, I'm unsure if this actually gives any benefit, so I might remove this whole feature.

miekg commented 3 months ago

this is valid config

networks:
    reverseproxy:
      name: reverseproxy
      external: true
    caddy2:

which means we want to say that the only network may connect to is reverseproxy. Anything else will be invalid, unless it's your own external network... don't think we need that.

miekg commented 3 months ago

this is done