- Notifications
You must be signed in to change notification settings - Fork921
Description
Is there an existing issue for this?
- I have searched the existing issues
Current Behavior
Problem Description
I'm currently running Coder in a Docker container usingnetwork_mode: "host"
which works perfectly, but I need to avoid using host networking mode for security and isolation reasons. When I remove the host network mode, the container doesn't function properly.
Current Working Configuration
version:'3.8'services:coder:image:ghcr.io/coder/coder:latestcontainer_name:codernetwork_mode:"host"# This works but I want to avoid itvolumes: -coder_data:/home/coder -/var/run/docker.sock:/var/run/docker.sockrestart:unless-stoppedvolumes:coder_data:
What I've Tried
I attempted to replacenetwork_mode: "host"
with explicit port mapping:
ports: -"7080:7080"environment: -CODER_HTTP_ADDRESS=0.0.0.0:7080
However, this doesn't provide the same functionality as the host network mode.
Expected Behavior
I expect Coder to work with standard Docker networking (bridge mode) using explicit port mappings, providing the same functionality asnetwork_mode: "host"
but with better container isolation.
Additional Context
From thecoder ping
output, I can see the service is running on port 7080, but I suspect there might be additional networking requirements for workspace communication or other Coder features.
Any guidance on the proper network configuration would be greatly appreciated!
Relevant Log Output
coder ping -n 5test
Expected Behavior
No response
Steps to Reproduce
- What is the recommended Docker Compose configuration for Coder without using
network_mode: "host"
? - Are there specific ports or network requirements that need to be configured?
- Do I need additional environment variables for proper network configuration?
- How should I handle dynamic port allocation for workspaces in this setup?
Environment
- Coder Version: Latest (from ghcr.io/coder/coder:latest)
- Docker Compose Version: 3.8
- Host OS: proxmox
- Network Setup: Private network with WireGuard VPN
Additional Context
No response