add option to disable pve-firewall

README.md

@@ -25,6 +25,7 @@ or
 | ADMIN_PASSWORD      | Password to access PVE web interface (mandatory)                | (none)          |
 | RELAY_HOST          | Hostname to use to relay email from Postfix (NOT WORKING!)      |                 |
 | PVE_ENTERPRISE      | If set to "yes", enterprise repository will be retained         | no              |
+| ENABLE_PVE_FIREWALL | If set to "no", PVE firewall service will be disabled           | yes             |
 
 Set vars in `run.sh` script and/or set them in `.envs` file.  
 Example `.envs` file:

entrypoint.sh

@@ -54,6 +54,15 @@ docker_verify_minimum_env
 
 docker_setup_pve
 
+if [ ! -d /var/log/pveproxy ]; then
+    mkdir -p /var/log/pveproxy
+    chmod 777 /var/log/pveproxy
+fi
+
+if [ -n "$ENABLE_PVE_FIREWALL" -a "$ENABLE_PVE_FIREWALL" == "no" ]; then
+    systemctl mask pve-firewall.service
+fi
+
 echo "Running PVE..."
 exec "$@"
 #exec gosu backup /usr/lib/x86_64-linux-gnu/proxmox-backup/proxmox-backup-proxy "$@"