diff --git a/RocketChat.md b/RocketChat.md index 9f55559..aa86608 100644 --- a/RocketChat.md +++ b/RocketChat.md @@ -26,6 +26,36 @@ Then set your siteurl of your RocketChat server: ``` sudo snap set rocketchat-server siteurl='https://chat.yourcompany.com' ``` +## Fixing RocketChat losing network connectivity at lxc container + +To run multiple RocketChat instances, to not let rocketchat-caddy mess up +main Caddy, main Caddy at Caddyfile needs to proxy to each RocketChat lxc container +where RocketChat container is running, like this: + +https://github.com/wekan/wekan/blob/main/docs/Platforms/FOSS/Snap/Many-Snaps-on-LXC.md + +For RocketChat, ofteb lxc containers lose network connectivity. +Fix was these commands from this webpage: +https://discuss.linuxcontainers.org/t/containers-do-not-have-outgoing-internet-access/10844/3 + +``` +for ipt in iptables iptables-legacy ip6tables ip6tables-legacy; do $ipt --flush; $ipt --flush -t nat; $ipt --delete-chain; $ipt --delete-chain -t nat; $ipt -P FORWARD ACCEPT; $ipt -P INPUT ACCEPT; $ipt -P OUTPUT ACCEPT; done + +systemctl reload snap.lxd.daemon +``` +After that, lxc containers needs updates and reboot: +``` +./into-rocketchat.sh + +./update.sh + +reboot +``` +That causes exit from lxc container to main bare metal host or main VM, where under those lxc containers are running. + +NOTE: These iptables changes also disables ufw firewall. + +Also, it seems that having Hetzner bare metal server firewall enabled at Hetzner control panel does not work well. ## RocketChat Skip Install Registration Wizard Fix