ufw-docker

What is ufw-docker?

By default, Docker writes its own iptables rules that bypass UFW, so a published container port can be reachable from the internet even though UFW looks like it's blocking it. ufw-docker patches UFW's rule files so container ports are only exposed the way you explicitly allow with normal `ufw route allow` commands, while still letting containers talk to each other internally.

Install ufw-docker on Omarchy

$ omarchy pkg add ufw-docker