How to change rules without container restart?

[exander77]

Docker doesn't seem to be able to dynamically change labels.
I have large mysql databases that need to run without downtime.
I don't see any way to reload rules except for adding them to compose and applying them also manually using ufw directly.

[shinebayar-g]

IIRC you can't change docker published ports dynamically either right?

[shinebayar-g]

You could give it a shot. But I'd like to request to make configuration file completely separate from containers. No labels required on containers.

[exander77]

Do you mean completely without labels like these:

UFW_MANAGED=true
UFW_RULES_PATH: ~/.ufw-docker-automated/rules
UFW_ALLOW_FROM_RULES: mysql-in

?
Or just without the actual rules that will be inside files?

[shinebayar-g]

Yeah completely without labels. Because I realized that if we need to update the labels to apply some changes it's always going to require re-deploying the container and that's no good IMO.

[exander77]

Yeah, I don't like either. But how connect rules with a container?

For compose I can do this, take: com.docker.compose.project.working_dir and join it with ufw.rules or ufw.yaml and expect the file to be in the project directory. But for directly run docker images? Use container names? Any ideas?

[shinebayar-g]

But how connect rules with a container?

By container name. Gotta careful with docker-compose containers, as they have slightly different naming convention.

Something like this as you suggested above works for me /etc/ufw-docker-automated/rules.d/...