Specify default route in quadlet

[kaaax0815]

This is my current quadlet file

[Container]
ContainerName=wg-easy
Image=ghcr.io/wg-easy/wg-easy:edge
AutoUpdate=registry

Volume=/etc/containers/volumes/wg-easy:/etc/wireguard:Z
Network=wg-easy.network
PublishPort=51820:51820/udp

Network=traefik.network
Label="traefik.enable=true"
Label="traefik.http.routers.wg-easy.rule=Host(`wireguard.example.com`)"
Label="traefik.http.routers.wg-easy.entrypoints=websecure"
Label="traefik.http.routers.wg-easy.service=wg-easy"
Label="traefik.http.services.wg-easy.loadbalancer.server.port=51821"

AddCapability=NET_ADMIN
AddCapability=SYS_MODULE
AddCapability=NET_RAW
Sysctl=net.ipv4.ip_forward=1
Sysctl=net.ipv4.conf.all.src_valid_mark=1
Sysctl=net.ipv6.conf.all.disable_ipv6=0
Sysctl=net.ipv6.conf.all.forwarding=1
Sysctl=net.ipv6.conf.default.forwarding=1

[Install]
# this is used to start the container on boot
WantedBy=default.target

I use two networks

[Network]
NetworkName=wg-easy
IPv6=true
# InterfaceName=eth0

The traefik network is the same except it does not have ipv6 enabled

The InterfaceName option is commented out as AlmaLinux 10 has Podman 5.4 and it was added in 5.6. This is as the wg-easy network should always be eth0 inside the container.

The problem currently is the following

$ ip route
default via 10.89.0.1 dev eth0 proto static metric 100
default via 10.89.1.1 dev eth1 proto static metric 100
10.8.0.0/24 dev wg0 proto kernel scope link src 10.8.0.1
10.89.0.0/24 dev eth0 proto kernel scope link src 10.89.0.4
10.89.1.0/24 dev eth1 proto kernel scope link src 10.89.1.3

It has two default routes, but there should only be one for eth0 (or the wg-easy network)

[Luap99]

If the the traefik network itself doesn't need internet and is only used to communicate between containers you could make it internal (Internal=true, --internal).

There is also --opt no_default_route=1 which disables only the default route for the network which may be exactly what you want here.