sendnrw/netbird
2
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-09-24 15:49:06 +02:00
Code Issues Packages Projects Releases Wiki Activity

[proxy] Serve UBI http-01 challenges on an unprivileged port

Browse Source 
The challenge listener defaulted to :80, which the image's non-root user
cannot bind on runtimes that keep the kernel's privileged-port floor,
such as OpenShift and Podman. The proxy logged the failure and kept
running without it, so http-01 issuance could never succeed. Default it
to :8081, mirroring how the main listener already moves to :8443.
This commit is contained in:
jnfrati
2026-09-23 17:29:33 +02:00
parent 7902fedb9c
commit ae765a09c5
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
proxy/Dockerfile.ubi
+3
View File
@@ -24,6 +24,9 @@ RUN mkdir -p /var/lib/netbird /certs && \
USER 1000:0
ENV HOME=/var/lib/netbird
ENV NB_PROXY_ADDRESS=":8443"
# Unprivileged ports: runtimes such as OpenShift and Podman keep the kernel
# default that reserves ports below 1024 for root. 8080 is the health probe.
ENV NB_PROXY_ACME_ADDRESS=":8081"
EXPOSE 8443
STOPSIGNAL SIGTERM
ENTRYPOINT ["/go/bin/netbird-proxy"]