From b4dab0c8fc20935ec8e6c1905fa538cfe539bcc2 Mon Sep 17 00:00:00 2001
From: KingKDot <why_are_you_looking_at_this@stoppeeping.com>
Date: Fri, 20 Mar 2026 18:32:21 -0500
Subject: [PATCH] fixes for future updates

---
 .gitignore                    |  1 +
 docker-compose.quickstart.yml | 13 ++++---------
 docker-compose.yml            | 13 ++++---------
 3 files changed, 9 insertions(+), 18 deletions(-)

diff --git a/.gitignore b/.gitignore
index 73e7116..b35f0ce 100644
--- a/.gitignore
+++ b/.gitignore
@@ -47,6 +47,7 @@ Overlord-Server/plugins/.plugin-state.json
 plugin-sample-go/*.wasm
 plugin-sample-go/*.zip
 plugin-sample-go/*.h
+plugin-hrdp/*
 
 # Runtime data
 Overlord-Server/data/
diff --git a/docker-compose.quickstart.yml b/docker-compose.quickstart.yml
index 77fa75a..0aeb093 100644
--- a/docker-compose.quickstart.yml
+++ b/docker-compose.quickstart.yml
@@ -9,9 +9,10 @@ services:
       cache_to:
         - type=local,dest=.docker-cache/buildx,mode=max
     container_name: overlord-server
-    ports:
-      # Bind host-published port. Use 127.0.0.1 for local reverse proxies (ngrok/caddy/traefik).
-      - "${OVERLORD_PUBLISH_HOST:-0.0.0.0}:5173:5173"
+    # Host networking: the container shares the host's network stack directly.
+    # Every port the server binds (5173, SOCKS5 proxies, etc.) is accessible
+    # on the host with zero overhead — no per-port proxy process.
+    network_mode: host
     environment:
       # Optional username for first admin user
       - OVERLORD_USER=admin
@@ -51,8 +52,6 @@ services:
       # Uncomment to use a static config file instead of env vars
       # - ./Overlord-Server/config.json:/app/config.json:ro
     restart: unless-stopped
-    networks:
-      - overlord-network
     healthcheck:
       # Use http:// when OVERLORD_TLS_OFFLOAD=true.
       test: ["CMD-SHELL", "curl -f ${OVERLORD_HEALTHCHECK_URL:-https://localhost:5173/health} >/dev/null 2>&1 || exit 1"]
@@ -61,10 +60,6 @@ services:
       retries: 3
       start_period: 40s
 
-networks:
-  overlord-network:
-    driver: bridge
-
 volumes:
   overlord-data:
   overlord-certs:
diff --git a/docker-compose.yml b/docker-compose.yml
index 252b22d..70d6e1f 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -9,9 +9,10 @@ services:
       cache_to:
         - type=local,dest=.docker-cache/buildx,mode=max
     container_name: overlord-server
-    ports:
-      # Bind host-published port. Use 127.0.0.1 for local reverse proxies (ngrok/caddy/traefik).
-      - "${OVERLORD_PUBLISH_HOST:-0.0.0.0}:${PORT:-5173}:5173"
+    # Host networking: the container shares the host's network stack directly.
+    # Every port the server binds (5173, SOCKS5 proxies, etc.) is accessible
+    # on the host with zero overhead — no per-port proxy process.
+    network_mode: host
     environment:
       PORT: ${PORT:-5173}
       HOST: ${HOST:-0.0.0.0}
@@ -54,8 +55,6 @@ services:
     init: true
     security_opt:
       - no-new-privileges:true
-    networks:
-      - overlord-network
     healthcheck:
       # Use http:// when OVERLORD_TLS_OFFLOAD=true.
       test: ["CMD-SHELL", "curl -f ${OVERLORD_HEALTHCHECK_URL:-https://localhost:5173/health} >/dev/null 2>&1 || exit 1"]
@@ -64,10 +63,6 @@ services:
       retries: 3
       start_period: 40s
 
-networks:
-  overlord-network:
-    driver: bridge
-
 volumes:
   overlord-data:
   overlord-certs: