Using Docker Bridge mode instead of Docker Host mode

[AlexCxx]

Hi,

Thanks for sharing this ! It's really helpful.

Do you think it's doable to adapt this sample to use Docker Bridge network mode instead of Docker Host network mode?
I tried to do it, without success.. (not really familiar with docker)

I saw that some people managed to do it on Nextcloud AIO GitHub: nextcloud/all-in-one#5439

Any thoughts?

Thanks!
Alex

[sen1ory]

hi,
if you wanna avoid exposing host network to tailscale, you can do something like:

version: "3.7"

# comment out, not needed, as network_mode: service:tailscale is used instead, now they're like on the same host
# NOTE: as now web1, web2, web3 are on the same network, their ports may collide, also, if web1 had port 8081, web2 8082, web3 8083, you could reach each of them from any container in the same network_mode by http://localhost:8081 or http://127.0.0.1:8082
# networks:
# proxy-network:
# name: proxy-network

services:
 caddy:
 image: caddy:latest
 restart: unless-stopped
 container_name: caddy
 hostname: caddy
 # put in the same network with tailscale without any bridges, as if they're on the same host
 network_mode: service:tailscale
# networks:
# - proxy-network
 depends_on:
 - tailscale 
 - web1
 - web2
 - web3
 ports:
 - "80:80"
 - "443:443"
 - "443:443/udp"
 volumes:
 - ./caddy/Caddyfile:/etc/caddy/Caddyfile
 - ./caddy/data:/data
 - ./caddy/config:/config
 - ./tailscale/tmp/tailscaled.sock:/var/run/tailscale/tailscaled.sock

 tailscale:
 env_file: .env
 container_name: tailscaled
 image: tailscale/tailscale
 # remove host exposure
# network_mode: host
 cap_add:
 - NET_ADMIN
 - NET_RAW
 volumes:
 - /dev/net/tun:/dev/net/tun
 - ./tailscale/varlib:/var/lib
 - ./tailscale/tmp:/tmp
 environment:
 - TS_STATE_DIR=/var/lib/tailscale

 web1:
 image: httpd:latest
 container_name: web1
 # put in the same network with tailscale without any bridges, as if they're on the same host
 network_mode: service:tailscale
# networks:
# - proxy-network

 web2:
 image: httpd:latest
 container_name: web2
 # put in the same network with tailscale without any bridges, as if they're on the same host
 network_mode: service:tailscale
# networks:
# - proxy-network

 web3:
 image: httpd:latest
 container_name: web3
 # put in the same network with tailscale without any bridges, as if they're on the same host
 network_mode: service:tailscale
# networks:
# - proxy-network