2 Commits

Author	SHA1	Message	Date
Jan Čermák	0cb96c36b6	Disable hassio gateway protection rules in dev mode (#6658) ... Since there's no Systemd guaranteed to be available for Devcontainer to create the transient unit, we need to skip creating of the firewall rules when Supervisor is started in dev mode. See: https://github.com/home-assistant/supervisor/pull/6650#issuecomment-4097583552	2026-03-23 10:13:31 +01:00
Stefan Agner	36124eafae	Add firewall rules to protect Docker gateway from external access (#6650) ... Add iptables rules via a systemd transient unit to drop traffic addressed to the bridge gateway IP from non-bridge interfaces. The firewall manager waits for the transient unit to complete and verifies success via D-Bus property change signals. On failure, the system is marked unhealthy and host-network add-ons are prevented from booting. Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-19 16:46:17 +01:00