From 6a107fba62ed39187fc118e15f8bc83842a40634 Mon Sep 17 00:00:00 2001
From: Melroy van den Berg <melroy@melroy.org>
Date: Fri, 5 Dec 2025 14:23:59 +0100
Subject: [PATCH] Do not use default Docker bridge network

---
 docker-compose.yml | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)

diff --git a/docker-compose.yml b/docker-compose.yml
index d7bb88fa..6108a6b4 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -54,6 +54,8 @@ x-shared:
 
     image: ${IMAGE_REPO:-ghcr.io/zammad/zammad}:${VERSION:-6.5.2-46}
     restart: ${RESTART:-always}
+    networks:
+      - zammad_internal_network
     volumes:
       - zammad-storage:/opt/zammad/storage
     depends_on:
@@ -73,6 +75,9 @@ services:
   zammad-elasticsearch:
     image: elasticsearch:${ELASTICSEARCH_VERSION:-8.19.8}
     restart: ${RESTART:-always}
+    networks:
+      - zammad_internal_network
+      - zammad_external_network
     volumes:
       - elasticsearch-data:/usr/share/elasticsearch/data
     environment:
@@ -92,10 +97,15 @@ services:
     command: memcached -m 256M
     image: memcached:${MEMCACHE_VERSION:-1.6.39-alpine}
     restart: ${RESTART:-always}
+    networks:
+      - zammad_internal_network
 
   zammad-nginx:
     <<: *zammad-service
     command: ["zammad-nginx"]
+    networks:
+      - zammad_internal_network
+      - zammad_external_network
     expose:
       - "${NGINX_PORT:-8080}"
     ports:
@@ -120,16 +130,24 @@ services:
   zammad-redis:
     image: redis:${REDIS_VERSION:-7.4.7-alpine}
     restart: ${RESTART:-always}
+    networks:
+      - zammad_internal_network
     volumes:
       - redis-data:/data
 
   zammad-scheduler:
     <<: *zammad-service
     command: ["zammad-scheduler"]
+    networks:
+      - zammad_internal_network
+      - zammad_external_network
 
   zammad-websocket:
     <<: *zammad-service
     command: ["zammad-websocket"]
+    networks:
+      - zammad_internal_network
+      - zammad_external_network
 
 volumes:
   elasticsearch-data:
@@ -142,3 +160,8 @@ volumes:
     driver: local
   zammad-storage:
     driver: local
+
+networks:
+  zammad_external_network:
+  zammad_internal_network:
+    internal: true