From 2c56a4cda8b0799a7ab672ca5e32b4b94f9409fb Mon Sep 17 00:00:00 2001
From: Dario B <github@mailhub.it>
Date: Tue, 14 Nov 2023 16:31:36 +0100
Subject: [PATCH] add option to disable pve-firewall

---
 README.md     | 1 +
 entrypoint.sh | 9 +++++++++
 2 files changed, 10 insertions(+)

diff --git a/README.md b/README.md
index fd22c13..85088ec 100644
--- a/README.md
+++ b/README.md
@@ -25,6 +25,7 @@ or
 | ADMIN_PASSWORD      | Password to access PVE web interface (mandatory)                | (none)          |
 | RELAY_HOST          | Hostname to use to relay email from Postfix (NOT WORKING!)      |                 |
 | PVE_ENTERPRISE      | If set to "yes", enterprise repository will be retained         | no              |
+| ENABLE_PVE_FIREWALL | If set to "no", PVE firewall service will be disabled           | yes             |
 
 Set vars in `run.sh` script and/or set them in `.envs` file.  
 Example `.envs` file:
diff --git a/entrypoint.sh b/entrypoint.sh
index aecbe37..06141f7 100644
--- a/entrypoint.sh
+++ b/entrypoint.sh
@@ -54,6 +54,15 @@ docker_verify_minimum_env
 
 docker_setup_pve
 
+if [ ! -d /var/log/pveproxy ]; then
+    mkdir -p /var/log/pveproxy
+    chmod 777 /var/log/pveproxy
+fi
+
+if [ -n "$ENABLE_PVE_FIREWALL" -a "$ENABLE_PVE_FIREWALL" == "no" ]; then
+    systemctl mask pve-firewall.service
+fi
+
 echo "Running PVE..."
 exec "$@"
 #exec gosu backup /usr/lib/x86_64-linux-gnu/proxmox-backup/proxmox-backup-proxy "$@"