From 9d0f339ab0a4bf2e459acd9b200ff9be0bca9538 Mon Sep 17 00:00:00 2001
From: Aleksander <170264518+t-aleksander@users.noreply.github.com>
Date: Mon, 13 Apr 2026 12:04:12 +0200
Subject: [PATCH] add masquerade by default to one liner 2

---
 docker-compose2.0/setup.sh | 17 +++++++++++++----
 1 file changed, 13 insertions(+), 4 deletions(-)

diff --git a/docker-compose2.0/setup.sh b/docker-compose2.0/setup.sh
index b5f24b4..8816ffe 100755
--- a/docker-compose2.0/setup.sh
+++ b/docker-compose2.0/setup.sh
@@ -96,16 +96,23 @@ usage() {
   echo "Usage: $(basename "$0") [OPTIONS]"
   echo
   echo "Available options:"
-  echo "  --dev           use development images"
-  echo "  --pre-release   use pre-release images"
-  echo "  --help          show this help and exit"
+  echo "  --dev             use development images"
+  echo "  --pre-release     use pre-release images"
+  echo "  --no-masquerade   disable IP masquerade on the gateway"
+  echo "  --help            show this help and exit"
   echo
   exit 0
 }
 
 parse_args() {
+    # Since the Gateway is running entirely in the Container,
+    # the masquerade is added by default to ensure it can access the host network.
+  MASQUERADE=true
   while [[ $# -gt 0 ]]; do
     case "$1" in
+      --no-masquerade)
+        MASQUERADE=false
+        shift ;;
       --dev)
         IMAGE_MODE="dev"
         DEFGUARD_CORE_TAG="dev"
@@ -226,9 +233,11 @@ POSTGRES_PASSWORD=${db_password}
 DEFGUARD_DB_NAME=defguard
 DEFGUARD_DB_USER=defguard
 DEFGUARD_DB_PASSWORD=${db_password}
+
+DEFGUARD_MASQUERADE=${MASQUERADE}
 EOF
 
-  success ".env written."
+    success ".env written"
 }
 
 launch() {