bluebluesoda
a4fc822822
Docker sets iptables FORWARD policy to DROP, which blocks forwarded traffic from incusbr0 (both IPv4, and IPv6 when Docker's experimental/ipv6 is enabled). This caused container apt and outbound traffic to time out during image build and container runtime on hosts where Docker is installed. - allow incusbr0 traffic in DOCKER-USER for iptables and ip6tables - install docker.service.d/vpsmgr.conf drop-in so rules persist across Docker restarts - clean up the drop-in and rules on uninstall - document Docker compatibility in docs/architecture.md
Documentation
Technical documentation for vpsmgr. All docs are in English.
| Doc | What it covers |
|---|---|
| architecture.md | System design: components, storage, network, security, traffic, users and user groups, image, install/uninstall lifecycle |
| configuration.md | Full reference for /etc/vpsmgr/config.yaml |
| ipv6.md | IPv6 pass-through design: per-account blocks, prefix support, routing, installer flow |
| ipv6-ndp-responder.md | Why prefix mode replaced ndppd with an in-tree NDP responder, design hardening, and what to test at scale |
| web-ssh.md | The browser terminal: how it reaches a container, how a session survives a dropped connection, and how to disable it |
| development.md | Building, testing, releasing, conventions |
See also AGENTS.md at the repo root — short version aimed at AI coding agents.