# Re-applies the Hub port restriction (restrict_hub_port.sh) whenever Docker starts. # Install: # sudo install -m 0755 restrict_hub_port.sh /usr/local/sbin/gti-fiscal-restrict-hub-port # printf 'HUB_BIND=10.0.10.117\nHUB_PORT=8000\nPROXY_IP=10.0.10.100\nIFACE=ens18\n' | sudo tee /etc/default/gti-fiscal-hub-port # sudo install -m 0644 gti-fiscal-hub-port.service /etc/systemd/system/ # sudo systemctl daemon-reload && sudo systemctl enable --now gti-fiscal-hub-port.service [Unit] Description=GTI Fiscal: allow the Hub port only from the reverse proxy After=docker.service Requires=docker.service PartOf=docker.service [Service] Type=oneshot RemainAfterExit=yes EnvironmentFile=/etc/default/gti-fiscal-hub-port ExecStart=/usr/local/sbin/gti-fiscal-restrict-hub-port [Install] WantedBy=docker.service