The backend container is the sidecar's only client and reaches it through host.docker.internal (docker's host-gateway = docker0). install.sh now binds there (SIDECAR_BIND overrides), keeping the run API off the LAN and the tailnet; StartLimitIntervalSec=0 keeps retrying until docker made the bridge. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
4.8 KiB
Executable File
4.8 KiB
Executable File