diff --git a/cloud/docker-compose.yml b/cloud/docker-compose.yml
index 0fc7883..7ba0197 100644
--- a/cloud/docker-compose.yml
+++ b/cloud/docker-compose.yml
@@ -20,6 +20,7 @@ services:
     container_name: nextcloud
     networks:
       - proxy
+      - protonmail
       - internal
     depends_on:
       - db
@@ -65,3 +66,5 @@ networks:
   internal:
   proxy:
     external: true
+  protonmail:
+    external: true
diff --git a/firewall b/firewall
index 21a2b65..a488556 100755
--- a/firewall
+++ b/firewall
@@ -82,5 +82,6 @@ iptables -A FORWARD -p tcp --tcp-flags SYN,ACK,FIN,RST RST -m limit --limit 1/s
 
 # Allow all from private network and docker network
 iptables -A INPUT -j ACCEPT -d 172.17.0.0/16
+iptables -A OUTPUT -j ACCEPT -d 172.17.0.0/16
 iptables -A INPUT -j ACCEPT -d 192.168.1.0/24
 iptables -A OUTPUT -j ACCEPT -d 192.168.1.0/24
diff --git a/protonmail/docker-compose.yml b/protonmail/docker-compose.yml
index 2226ff8..7b86001 100644
--- a/protonmail/docker-compose.yml
+++ b/protonmail/docker-compose.yml
@@ -5,9 +5,14 @@ services:
     image: shenxn/protonmail-bridge
     restart: always
     container_name: protonmail-bridge
-    network_mode: host
+    networks:
+      - protonmail
     volumes:
       - protonmail:/root
 
 volumes:
   protonmail:
+
+networks:
+  protonmail:
+      external: true