Skip to content

feat: make bridge network mode default - #9

Open
j4n wants to merge 3 commits into
mainfrom
bridge-network
Open

feat: make bridge network mode default#9
j4n wants to merge 3 commits into
mainfrom
bridge-network

Conversation

@j4n

@j4n j4n commented Aug 28, 2026

Copy link
Copy Markdown
Collaborator

Map the necessary ports; this means loosing client IP visibility in the container but maybe thats a good thing for privacy?

@j4n
j4n force-pushed the bridge-network branch 3 times, most recently from 9ae4521 to ab445f8 Compare August 31, 2026 15:41
Comment thread docker-compose.yaml
- "465:465"
- "587:587"
- "993:993"
- "3340:3340"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@j4n looks like you aren't exposing the turn port

you want something like this:

turn_port = 3478
turn_min_port = 49152
turn_max_port = 65535

then in compose.yaml

  - "3478:3478/udp"
  - "49152-65535:49152-65535/udp"

reason: turn will start to enumerate ports so it's best practice allow large udp ranges for this.

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@j4n also it's best practice if you're going to use bridge-mode explicitly define the bridge

networks:
  default:
    enable_ipv6: true

this network can be whatever you want namespace wise ie chatmail. consider adding the enable_ipv6: bool given that there's a lot of focus on ipv6 from experience.


services:
chatmail:
network_mode: "host"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@j4n after some thought from our chats, my research, and things i've ran into. i think it's likely a better approach to just use network_mode: host for a singular compose stack vs giving user options of bridging.

reason: bridging can get complex really fast with something like chatmail. plus without manipulating the daemon you theoretically lose the client-ip.

@j4n j4n mentioned this pull request Sep 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants