Added possibility to restrict internet access

.env.example

@@ -20,7 +20,13 @@ FUNKWHALE_HOSTNAME=
 FUNKWHALE_VERSION=
 
 # Networks
-NETWORK=webservices
+# Name of the external network of the reverse proxy
+REVERSE_PROXY_NETWORK=webservices
+# Restrict internet access to the whole Funkwhale app
+# Note: It will be normally reachable from the web (via the reverse-proxy), but
+#       the containers cannot make external calls on their own, thus no
+#       federation or anything that may require internet from the server side.
+NO_INTERNET_ACC=false
 
 # postgres (optional)
 DB_IMG=

docker-compose.yml

@@ -111,6 +111,7 @@ networks:
   default:
     internal: true
   internet-access:
+    internal: ${NO_INTERNET_ACC}
   main-webservices:
     external:
-      name: ${NETWORK}
+      name: ${REVERSE_PROXY_NETWORK}