From d240ac1f1900a3b1f53f331783e9e90f77f72be6 Mon Sep 17 00:00:00 2001
From: sbwml <admin@cooluc.com>
Date: Thu, 5 Mar 2026 22:05:10 +0800
Subject: [PATCH] dockerd: add docker interface to LAN zone to allow LAN access
 to port mappings

Signed-off-by: sbwml <admin@cooluc.com>
---
 files/dockerd.init | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)

diff --git a/files/dockerd.init b/files/dockerd.init
index 8bfccc3..cee4f29 100755
--- a/files/dockerd.init
+++ b/files/dockerd.init
@@ -39,6 +39,21 @@ find_network_device() {
 	echo "${device_section}"
 }
 
+check_zone() {
+	local cfg="$1"
+	local name
+
+	config_get name "$cfg" name
+	[ "$name" = "lan" ] && echo "$cfg"
+}
+
+find_lan_zone() {
+	local section
+
+	config_load firewall
+	config_foreach check_zone zone
+}
+
 boot() {
 	uciadd
 	rc_procd start_service
@@ -104,6 +119,14 @@ uciadd() {
 		uci_quiet commit firewall
 	fi
 
+	# Add docker interface to LAN zone
+	lan_zone=$(find_lan_zone)
+	if [ -n "$lan_zone" ]; then
+		uci del_list firewall.${lan_zone}.network="${iface}"
+		uci add_list firewall.${lan_zone}.network="${iface}"
+		uci commit firewall
+	fi
+
 	reload_config
 }