search

qdm12 / gluetun

VPN client in a thin Docker container for multiple VPN providers, written in Go, and using OpenVPN or Wireguard, DNS over TLS, with a few proxy servers built-in.
https://hub.docker.com/r/qmcgaw/gluetun
MIT License
7.22k stars 345 forks source link

Bug: Cannot rebind ports for multiple services that default to port 80 and do not have iptables #1910

Open MulverineX opened 10 months ago

MulverineX commented 10 months ago

Is this urgent?

No

Host OS

Debian Bullseye

CPU arch

x86_64

VPN service provider

Custom

What are you using to run the container

docker-compose

What is the version of Gluetun

Running version latest built on 2023-09-22T09:26:33.266Z (commit c435bbb)

What's the problem 🤔

I'm trying to follow this solution https://github.com/qdm12/gluetun/issues/53#issuecomment-553670809, but because of the lightweight image that the services use, iptables is unavailable.

mulverine@athrawes:~$ sudo docker exec -it aniping /bin/sh
/ # iptables -t nat -I PREROUTING -s 0/0 -d 127.0.0.1 -p tcp --dport 80 -j REDIRECT --to-ports 8119
/bin/sh: iptables: not found

(the same thing happens on organizr)

The provided docker compose file has been shortened because most of it is irrelevant.

I tried to request that this is remedied in the source service but the suggestion was denied https://github.com/Organizr/docker-organizr/issues/32

Ongoing issue on Aniping: https://github.com/kuruoujou/aniping/issues/6

I've tried to fork the image, but unfortunately I'm not very experienced with this, so I'm unable to get it to publish https://github.com/MulverineX/docker-organizr/actions/runs/6519790340

Share your logs (at least 10 lines)

Oct 13 19:14:04 athrawes docker[3816645]: vpn          | 2023-10-14T01:14:04Z INFO [openvpn] library versions: OpenSSL 3.1.3 19 Sep 2023, LZO 2.10
Oct 13 19:14:04 athrawes docker[3816645]: vpn          | 2023-10-14T01:14:04Z INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]169.150.231.243:1194
Oct 13 19:14:04 athrawes docker[3816645]: vpn          | 2023-10-14T01:14:04Z INFO [openvpn] UDP link local: (not bound)
Oct 13 19:14:04 athrawes docker[3816645]: vpn          | 2023-10-14T01:14:04Z INFO [openvpn] UDP link remote: [AF_INET]169.150.231.243:1194
Oct 13 19:14:04 athrawes docker[3816645]: vpn          | 2023-10-14T01:14:04Z WARN [openvpn] 'link-mtu' is used inconsistently, local='link-mtu 1534', remote='link-mtu 1558'
Oct 13 19:14:04 athrawes docker[3816645]: vpn          | 2023-10-14T01:14:04Z WARN [openvpn] 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA1'
Oct 13 19:14:04 athrawes docker[3816645]: vpn          | 2023-10-14T01:14:04Z WARN [openvpn] 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo'
Oct 13 19:14:04 athrawes docker[3816645]: vpn          | 2023-10-14T01:14:04Z INFO [openvpn] [vpn103.prd.denver.ovpn.com] Peer Connection Initiated with [AF_INET]169.150.231.243:1194
Oct 13 19:15:51 athrawes docker[3821365]: vpn          | ========================================
Oct 13 19:15:51 athrawes docker[3821365]: vpn          | ========================================
Oct 13 19:15:51 athrawes docker[3821365]: vpn          | =============== gluetun ================
Oct 13 19:15:51 athrawes docker[3821365]: vpn          | ========================================
Oct 13 19:15:51 athrawes docker[3821365]: vpn          | =========== Made with ❤️ by ============
Oct 13 19:15:51 athrawes docker[3821365]: vpn          | ======= https://github.com/qdm12 =======
Oct 13 19:15:51 athrawes docker[3821365]: vpn          | ========================================
Oct 13 19:15:51 athrawes docker[3821365]: vpn          | ========================================
Oct 13 19:15:51 athrawes docker[3821365]: vpn          |
Oct 13 19:15:51 athrawes docker[3821365]: vpn          | Running version latest built on 2023-09-22T09:26:33.266Z (commit c435bbb)
Oct 13 19:15:51 athrawes docker[3821365]: vpn          |
Oct 13 19:15:51 athrawes docker[3821365]: vpn          | 🔧 Need help? https://github.com/qdm12/gluetun/discussions/new
Oct 13 19:15:51 athrawes docker[3821365]: vpn          | 🐛 Bug? https://github.com/qdm12/gluetun/issues/new
Oct 13 19:15:51 athrawes docker[3821365]: vpn          | ✨ New feature? https://github.com/qdm12/gluetun/issues/new
Oct 13 19:15:51 athrawes docker[3821365]: vpn          | ☕ Discussion? https://github.com/qdm12/gluetun/discussions/new
Oct 13 19:15:51 athrawes docker[3821365]: vpn          | 💻 Email? quentin.mcgaw@gmail.com
Oct 13 19:15:51 athrawes docker[3821365]: vpn          | 💰 Help me? https://www.paypal.me/qmcgaw https://github.com/sponsors/qdm12
Oct 13 19:15:51 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:51Z INFO [routing] default route found: interface eth0, gateway 172.24.0.1, assigned IP 172.24.0.2 and family v4
Oct 13 19:15:51 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:51Z INFO [routing] local ethernet link found: eth0
Oct 13 19:15:51 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:51Z INFO [routing] local ipnet found: 172.24.0.0/16
Oct 13 19:15:51 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:51Z INFO [firewall] enabling...
Oct 13 19:15:51 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:51Z INFO [firewall] enabled successfully
Oct 13 19:15:52 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:52Z INFO [storage] creating /gluetun/servers.json with 17689 hardcoded servers
Oct 13 19:15:53 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:53Z INFO Alpine version: 3.18.3
Oct 13 19:15:53 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:53Z INFO OpenVPN 2.5 version: 2.5.8
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:54Z INFO OpenVPN 2.6 version: 2.6.5
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:54Z INFO Unbound version: 1.17.1
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:54Z INFO IPtables version: v1.8.9
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:54Z INFO Settings summary:
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | ├── VPN settings:
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |   ├── VPN provider settings:
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |   |   ├── Name: custom
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |   |   └── Server selection settings:
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |   |       ├── VPN type: openvpn
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |   |       └── OpenVPN server selection settings:
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |   |           ├── Protocol: UDP
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |   |           └── Custom configuration file: /gluetun/custom.conf
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |   └── OpenVPN settings:
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |       ├── OpenVPN version: 2.5
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |       ├── User: [set]
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |       ├── Password: [set]
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |       ├── Custom configuration file: /gluetun/custom.conf
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |       ├── Network interface: tun0
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |       ├── Run OpenVPN as: root
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |       └── Verbosity level: 1
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | ├── DNS settings:
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |   ├── Keep existing nameserver(s): no
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |   ├── DNS server address to use: 127.0.0.1
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |   └── DNS over TLS settings:
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |       ├── Enabled: yes
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |       ├── Update period: every 24h0m0s
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |       ├── Unbound settings:
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |       |   ├── Authoritative servers:
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |       |   |   └── cloudflare
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |       |   ├── Caching: yes
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |       |   ├── IPv6: no
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |       |   ├── Verbosity level: 1
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |       |   ├── Verbosity details level: 0
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |       |   ├── Validation log level: 0
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |       |   ├── System user: root
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |       |   └── Allowed networks:
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |       |       ├── 0.0.0.0/0
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |       |       └── ::/0
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |       └── DNS filtering settings:
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |           ├── Block malicious: yes
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |           ├── Block ads: no
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |           ├── Block surveillance: no
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |           └── Blocked IP networks:
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |               ├── 127.0.0.1/8
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |               ├── 10.0.0.0/8
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |               ├── 172.16.0.0/12
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |               ├── 192.168.0.0/16
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |               ├── 169.254.0.0/16
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |               ├── ::1/128
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |               ├── fc00::/7
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |               ├── fe80::/10
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |               ├── ::ffff:127.0.0.1/104
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |               ├── ::ffff:10.0.0.0/104
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |               ├── ::ffff:169.254.0.0/112
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |               ├── ::ffff:172.16.0.0/108
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |               └── ::ffff:192.168.0.0/112
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | ├── Firewall settings:
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |   └── Enabled: yes
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | ├── Log settings:
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |   └── Log level: INFO
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | ├── Health settings:
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |   ├── Server listening address: 127.0.0.1:9999
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |   ├── Target address: cloudflare.com:443
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |   ├── Duration to wait after success: 5s
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |   ├── Read header timeout: 100ms
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |   ├── Read timeout: 500ms
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |   └── VPN wait durations:
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |       ├── Initial duration: 6s
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |       └── Additional duration: 5s
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | ├── Shadowsocks server settings:
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |   └── Enabled: no
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | ├── HTTP proxy settings:
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |   └── Enabled: no
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | ├── Control server settings:
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |   ├── Listening address: :8000
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |   └── Logging: yes
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | ├── OS Alpine settings:
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |   ├── Process UID: 1000
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |   └── Process GID: 1000
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | ├── Public IP settings:
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |   ├── Fetching: every 12h0m0s
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | |   └── IP file path: /tmp/gluetun/ip
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | └── Version settings:
Oct 13 19:15:54 athrawes docker[3821365]: vpn          |     └── Enabled: yes
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:54Z INFO [routing] default route found: interface eth0, gateway 172.24.0.1, assigned IP 172.24.0.2 and family v4
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:54Z INFO [routing] adding route for 0.0.0.0/0
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:54Z INFO [firewall] setting allowed subnets...
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:54Z INFO [routing] default route found: interface eth0, gateway 172.24.0.1, assigned IP 172.24.0.2 and family v4
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:54Z INFO TUN device is not available: open /dev/net/tun: no such file or directory; creating it...
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:54Z INFO [dns] using plaintext DNS at address 1.1.1.1
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:54Z INFO [http server] http server listening on [::]:8000
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:54Z INFO [healthcheck] listening on 127.0.0.1:9999
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:54Z INFO [firewall] allowing VPN connection...
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:54Z INFO [openvpn] OpenVPN 2.5.8 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Nov  2 2022
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:54Z INFO [openvpn] library versions: OpenSSL 3.1.3 19 Sep 2023, LZO 2.10
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:54Z INFO [openvpn] TCP/UDP: Preserving recently used remote address: [AF_INET]169.150.231.243:1194
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:54Z INFO [openvpn] UDP link local: (not bound)
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:54Z INFO [openvpn] UDP link remote: [AF_INET]169.150.231.243:1194
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:54Z WARN [openvpn] 'link-mtu' is used inconsistently, local='link-mtu 1534', remote='link-mtu 1558'
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:54Z WARN [openvpn] 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA1'
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:54Z WARN [openvpn] 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo'
Oct 13 19:15:54 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:54Z INFO [openvpn] [vpn103.prd.denver.ovpn.com] Peer Connection Initiated with [AF_INET]169.150.231.243:1194
Oct 13 19:15:56 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:56Z INFO [openvpn] TUN/TAP device tun0 opened
Oct 13 19:15:56 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:56Z INFO [openvpn] /sbin/ip link set dev tun0 up mtu 1500
Oct 13 19:15:56 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:56Z INFO [openvpn] /sbin/ip link set dev tun0 up
Oct 13 19:15:56 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:56Z INFO [openvpn] /sbin/ip addr add dev tun0 10.128.0.201/22
Oct 13 19:15:56 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:56Z INFO [openvpn] UID set to nonrootuser
Oct 13 19:15:56 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:56Z INFO [openvpn] Initialization Sequence Completed
Oct 13 19:15:56 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:56Z INFO [dns] downloading DNS over TLS cryptographic files
Oct 13 19:15:56 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:56Z INFO [dns] downloading hostnames and IP block lists
Oct 13 19:15:59 athrawes docker[3821365]: vpn          | 2023-10-14T01:15:59Z INFO [healthcheck] healthy!
Oct 13 19:16:11 athrawes docker[3821365]: vpn          | 2023-10-14T01:16:11Z WARN [dns] context deadline exceeded (Client.Timeout or context cancellation while reading body)
Oct 13 19:16:13 athrawes docker[3821365]: vpn          | 2023-10-14T01:16:13Z INFO [dns] init module 0: validator
Oct 13 19:16:14 athrawes docker[3821365]: vpn          | 2023-10-14T01:16:14Z INFO [dns] init module 1: iterator
Oct 13 19:16:16 athrawes docker[3821365]: vpn          | 2023-10-14T01:16:16Z INFO [dns] start of service (unbound 1.17.1).
Oct 13 19:16:17 athrawes docker[3821365]: vpn          | 2023-10-14T01:16:17Z INFO [dns] generate keytag query _ta-4a5c-4f66. NULL IN
Oct 13 19:16:17 athrawes docker[3821365]: vpn          | 2023-10-14T01:16:17Z INFO [dns] generate keytag query _ta-4a5c-4f66. NULL IN
Oct 13 19:16:17 athrawes docker[3821365]: vpn          | 2023-10-14T01:16:17Z INFO [dns] ready
Oct 13 19:16:18 athrawes docker[3821365]: vpn          | 2023-10-14T01:16:18Z INFO [ip getter] Public IP address is 169.150.231.246 (United States, Colorado, Denver)
Oct 13 19:16:18 athrawes docker[3821365]: vpn          | 2023-10-14T01:16:18Z INFO [vpn] You are running 18 commits behind the most recent latest
Oct 13 20:13:50 athrawes docker[3821365]: vpn          | 2023-10-14T02:13:50Z WARN [openvpn] 'link-mtu' is used inconsistently, local='link-mtu 1534', remote='link-mtu 1558'
Oct 13 20:13:50 athrawes docker[3821365]: vpn          | 2023-10-14T02:13:50Z WARN [openvpn] 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA1'
Oct 13 20:13:50 athrawes docker[3821365]: vpn          | 2023-10-14T02:13:50Z WARN [openvpn] 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo'
Oct 13 20:16:28 athrawes docker[3821365]: vpn          | 2023-10-14T02:16:28Z INFO [dns] generate keytag query _ta-4a5c-4f66. NULL IN
Oct 13 21:11:46 athrawes docker[3821365]: vpn          | 2023-10-14T03:11:46Z WARN [openvpn] 'link-mtu' is used inconsistently, local='link-mtu 1534', remote='link-mtu 1558'
Oct 13 21:11:46 athrawes docker[3821365]: vpn          | 2023-10-14T03:11:46Z WARN [openvpn] 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA1'
Oct 13 21:11:46 athrawes docker[3821365]: vpn          | 2023-10-14T03:11:46Z WARN [openvpn] 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo'
Oct 13 21:20:00 athrawes docker[3821365]: vpn          | 2023-10-14T03:20:00Z INFO [dns] generate keytag query _ta-4a5c-4f66. NULL IN
Oct 13 22:09:42 athrawes docker[3821365]: vpn          | 2023-10-14T04:09:42Z WARN [openvpn] 'link-mtu' is used inconsistently, local='link-mtu 1534', remote='link-mtu 1558'
Oct 13 22:09:42 athrawes docker[3821365]: vpn          | 2023-10-14T04:09:42Z WARN [openvpn] 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA1'
Oct 13 22:09:42 athrawes docker[3821365]: vpn          | 2023-10-14T04:09:42Z WARN [openvpn] 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo'
Oct 13 22:20:39 athrawes docker[3821365]: vpn          | 2023-10-14T04:20:39Z INFO [dns] generate keytag query _ta-4a5c-4f66. NULL IN
Oct 13 23:07:38 athrawes docker[3821365]: vpn          | 2023-10-14T05:07:38Z WARN [openvpn] 'link-mtu' is used inconsistently, local='link-mtu 1534', remote='link-mtu 1558'
Oct 13 23:07:38 athrawes docker[3821365]: vpn          | 2023-10-14T05:07:38Z WARN [openvpn] 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA1'
Oct 13 23:07:38 athrawes docker[3821365]: vpn          | 2023-10-14T05:07:38Z WARN [openvpn] 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo'
Oct 13 23:21:33 athrawes docker[3821365]: vpn          | 2023-10-14T05:21:33Z INFO [dns] generate keytag query _ta-4a5c-4f66. NULL IN
Oct 14 00:05:34 athrawes docker[3821365]: vpn          | 2023-10-14T06:05:34Z WARN [openvpn] 'link-mtu' is used inconsistently, local='link-mtu 1534', remote='link-mtu 1558'
Oct 14 00:05:34 athrawes docker[3821365]: vpn          | 2023-10-14T06:05:34Z WARN [openvpn] 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA1'
Oct 14 00:05:34 athrawes docker[3821365]: vpn          | 2023-10-14T06:05:34Z WARN [openvpn] 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo'
Oct 14 00:21:58 athrawes docker[3821365]: vpn          | 2023-10-14T06:21:58Z INFO [dns] generate keytag query _ta-4a5c-4f66. NULL IN
Oct 14 01:03:30 athrawes docker[3821365]: vpn          | 2023-10-14T07:03:30Z WARN [openvpn] 'link-mtu' is used inconsistently, local='link-mtu 1534', remote='link-mtu 1558'
Oct 14 01:03:30 athrawes docker[3821365]: vpn          | 2023-10-14T07:03:30Z WARN [openvpn] 'auth' is used inconsistently, local='auth [null-digest]', remote='auth SHA1'
Oct 14 01:03:30 athrawes docker[3821365]: vpn          | 2023-10-14T07:03:30Z WARN [openvpn] 'comp-lzo' is present in remote config but missing in local config, remote='comp-lzo'
Oct 14 01:24:12 athrawes docker[3821365]: vpn          | 2023-10-14T07:24:12Z INFO [dns] generate keytag query _ta-4a5c-4f66. NULL IN

Share your configuration

name: neptune
services:

### ----  Media Service

  vpn:
    container_name: vpn
    image: qmcgaw/gluetun:latest

    cap_add:
      - NET_ADMIN

    environment:
      - VPN_SERVICE_PROVIDER=custom
      - OPENVPN_USER=REDACTED
      - OPENVPN_PASSWORD=REDACTED
      - VPN_TYPE=openvpn # TODO: After getting new setup on qiulong use wireguard instead
      - OPENVPN_CUSTOM_CONFIG=/gluetun/custom.conf

    volumes:
      - ./client.ovpn.conf:/gluetun/custom.conf:ro

    networks:
      - neptune

    ports:
      - 8080:8080 # qbittorrent
      - 6881:6881
      - 6881:6881/udp # prowlarr ports
      - 9696:9696
      - 7878:7878 # sonarr port
      - 8989:8989 # radarr port
      - 8117:8117 # jproxy port
      - 8119:8119 # aniping port
      - 6767:6767 # bazarr port
      - 8265:8265 # tdarr webUI port
      - 8266:8266 # tdarr server port
      - 4608:4608 # organizr port
      - 5055:5055 # jellyseerr port
      - 8096:8096 # jellyfin ports
      - 7359:7359/udp
      - 8920:8920

    restart: "unless-stopped"

  organizr: # Manage all services
    container_name: organizr
    image: organizr/organizr:latest

    depends_on:
     - vpn
    network_mode: service:vpn

    environment:
      - PUID=1000
      - PGID=1000
      - TZ=America/Denver
      - branch=v2-master

    volumes:
      - organizr-config:/config

    restart: unless-stopped

  aniping: # Anime torrent release RSS/Anilist tracker
    container_name: aniping
    image: kuroshi/aniping:latest

    depends_on:
     - vpn
    network_mode: service:vpn

    environment:
    - PUID=1000
    - PGID=1000
    - TZ=America/Denver
    - port=8119
    volumes:
    - torrent-downloads:/downloads
    - aniping-config:/app/db
    - aniping-cache:/app/static/images/cache
    - ./aniping-config.yml:/app/config/config.yml

    restart: unless-stopped

volumes:
  torrent-downloads:
    driver: local
    driver_opts:
      type: none
      device: /media/neptune/data
      o: bind
  aniping-config:
    driver: local
    driver_opts:
      type: none
      device: /media/neptune/config/aniping/config
      o: bind
  aniping-cache:
    driver: local
    driver_opts:
      type: none
      device: /media/neptune/config/aniping/cache
      o: bind
  organizr-config:
    driver: local
    driver_opts:
      type: none
      device: /media/neptune/config/organizr
      o: bind

networks:
  neptune:
qdm12 commented 10 months ago

but because of the lightweight image that the services use, iptables is unavailable

You could do it on Gluetun, which has iptables and net_admin capability. BUT this won't help, since here we can't have two programs listen on the same port, and the firewall redirections can't help with that. The only way as you proposed is to have the internal listening port configurable for docker-organizr, quite a shameful comment from the maintainer to not support such simple feature, which is also rather easy to implement. ANYWAY...

What you can do to build the Docker image from your forked repository with the port changed, is to have Docker + git installed and then run

docker build -t organizr/organizr https://github.com/MulverineX/docker-organizr.git

And that should build the image tagged as organizr/organizr which you can use 😉