Secure proton mail bridge networks

cloud/docker-compose.yml

@@ -20,6 +20,7 @@ services:
     container_name: nextcloud
     networks:
       - proxy
+      - protonmail
       - internal
     depends_on:
       - db
@@ -65,3 +66,5 @@ networks:
   internal:
   proxy:
     external: true
+  protonmail:
+    external: true

firewall

@@ -82,5 +82,6 @@ iptables -A FORWARD -p tcp --tcp-flags SYN,ACK,FIN,RST RST -m limit --limit 1/s
 
 # Allow all from private network and docker network
 iptables -A INPUT -j ACCEPT -d 172.17.0.0/16
+iptables -A OUTPUT -j ACCEPT -d 172.17.0.0/16
 iptables -A INPUT -j ACCEPT -d 192.168.1.0/24
 iptables -A OUTPUT -j ACCEPT -d 192.168.1.0/24

protonmail/docker-compose.yml

@@ -5,9 +5,14 @@ services:
     image: shenxn/protonmail-bridge
     restart: always
     container_name: protonmail-bridge
-    network_mode: host
+    networks:
+      - protonmail
     volumes:
       - protonmail:/root
 
 volumes:
   protonmail:
+
+networks:
+  protonmail:
+      external: true