Add docker support to shorewall

[chef.git] / cookbooks / networking / templates / default / shorewall-interfaces.erb

diff --git a/cookbooks/networking/templates/default/shorewall-interfaces.erb b/cookbooks/networking/templates/default/shorewall-interfaces.erb
index d8a5705d27b8ee4370ca7ca4c52a32f4a5c0dc72..3090a47cc7af9a8dd306207bdde6aa9e991c5872 100644 (file)
--- a/cookbooks/networking/templates/default/shorewall-interfaces.erb
+++ b/cookbooks/networking/templates/default/shorewall-interfaces.erb
@@ -1,13 +1,16 @@
 # DO NOT EDIT - This file is being maintained by Chef
 
-# ZONE INTERFACE       BROADCAST       OPTIONS
+?FORMAT 2
+
+# ZONE INTERFACE       OPTIONS
 <% node[:networking][:interfaces].each do |name,interface| -%>
 <% if interface[:interface] && interface[:family] == "inet" -%>
 <% if interface[:role] == "internal" -%>
-loc    <%= interface[:interface] %>            detect          nosmurfs,tcpflags
+loc    <%= interface[:interface] %>            nosmurfs,tcpflags
 <% elsif interface[:role] == "external" -%>
-net    <%= interface[:interface] %>            detect          nosmurfs,tcpflags
+net    <%= interface[:interface] %>            nosmurfs,tcpflags
 <% end -%>
 <% end -%>
 <% end -%>
-loc    tun+            detect          nosmurfs,tcpflags
+loc    wg+             nosmurfs,tcpflags
+dock   docker0         bridge