restrict access docker services running in vagrant box to perimeter network

readme.md

does not handle input box itself

# cat /etc/iptables/rules.v4 
# Generated by iptables-save v1.8.9 (nf_tables) on Mon Jun  5 13:36:08 2023
*filter
:INPUT ACCEPT [5:208]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [170:16192]
:DOCKER-USER - [0:0]
:HOMENETS - [0:0]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i eth1 -j FLABNETS

-A DOCKER-USER -m state --state RELATED,ESTABLISHED -j ACCEPT
-A DOCKER-USER -i eth1 -j HOMENETS

-A HOMENETS -s XXXX/26 -j ACCEPT
-A HOMENETS -s XXXX/26 -j ACCEPT
-A HOMENETS -j DROP
COMMIT
# Completed on Mon Jun  5 13:36:08 2023

# cat /etc/iptables/rules.v6
# Generated by ip6tables-save v1.8.9 (nf_tables) on Mon Jun  5 13:36:08 2023
*filter
:INPUT ACCEPT [1:60]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [1:64]
:DOCKER-USER - [0:0]
-A DOCKER-USER -m state --state RELATED,ESTABLISHED -j ACCEPT
-A DOCKER-USER -i eth1 ! -s XXXX -j DROP
COMMIT
# Completed on Mon Jun  5 13:36:08 2023