I encountered an error while trying to proxy HTTPS and HTTP services.

[vicnoah]

I keep getting "Permission denied" when trying to use rothole to proxy ports 80 and 443.

2023-06-12T03:22:10.986117Z ERROR connection{addr=xx}:handle{service=1panel-https}:run_tcp_connection_pool: rathole::server: Permission denied (os error 13). Retry in 870.224686ms

docker-compose.yaml

version: '3.3'
services:
    rathole:
        image: rapiz1/rathole:v0.4.8
        restart: always
        cap_add:
          - NET_ADMIN
        command: --server /app/config.toml
        ports:
            - '80:80'
            - '443:443'
            - '33080:33080'
            - '34000:34000'
        volumes:
            - $PWD/config.toml:/app/config.toml

[vypxl]

I have the same issue, how did you solve it?

[fernvenue]

I have the same issue, how did you solve it?

Hi, could you please provide any details or log information?

[vypxl]

Sorry, I ended up using a different solution instead of rathole, I use a wireguard tunnel now.

[Skaronator]

I ran in the same issue. The problem is most likely that the user 1000:1000 (from the Dockerfile) doesn't have permission to open 80 and 443 port.

One (bad) solution to this issue would be to use a user with enough permissions. For example, set user: root in your docker-compose file fixes this.

[Skaronator]

Got it working. Make sure the config file owns 1000:1000 then this will work:

version: '3.8'
services:
  rathole:
    image: rapiz1/rathole:v0.5.0
    container_name: rathole
    volumes:
    - /srv/config/rathole.toml:/app/config.toml
    ports:
    - 80:80
    - 443:443
    - 2333:2333
    command:
    - "--server"
    - "/app/config.toml"
    restart: always

[phlplowe9]

Hi. I'm trying to learn docker, compose, rathole, azure container instance and azure storage account all at once and I'm having trouble following your post. I was hoping you could help me with the following questions:

1. Why are we using docker compose? I thought that's more for multi-container apps while rathole is a single app.
2. How does making sure the config file is owned by 1000:1000 make rathole run with enough permission to bind port 80 and 443?
3. Do you know how to make a docker contained app run as root using docker cli instead of compose?