diff --git a/roles/debian_server/tasks/docker.yml b/roles/debian_server/tasks/docker.yml index 118e3bc825019456f66894d34883624304edf1a2..166eccd65661f576732b889d4e42c505796398f9 100644 --- a/roles/debian_server/tasks/docker.yml +++ b/roles/debian_server/tasks/docker.yml @@ -19,9 +19,12 @@ mode: preserve src: docker-restart -- name: Create a drop-in directory for the Docker service +- name: Create a drop-in directory for the Docker service and socket + loop: + - service + - socket file: - path: /etc/systemd/system/docker.service.d + path: /etc/systemd/system/docker.{{ item }}.d mode: 0o0755 state: directory @@ -35,6 +38,16 @@ notify: - Systemd daemon reload +- name: Allow access from the toolbox container + copy: + content: | + [Socket] + SocketGroup=nimrod + dest: /etc/systemd/system/docker.socket.d/nimrod-group.conf + mode: 0o0644 + notify: + - Systemd daemon reload + - name: Allow default Docker network access to local services community.general.ufw: direction: in