kiara/Fediversity
1
0
Fork 0
forked from Fediversity/Fediversity
Code Pull requests Activity

expose 8080 in nftables, pending proper TLS/reverse-proxy/port (?)

Browse source
This commit is contained in:
Kiara Grouwstra 2025-07-08 18:51:44 +02:00
parent 0a615fa961
commit fe789c1819
Signed by: kiara
SSH key fingerprint: SHA256:COspvLoLJ5WC5rFb9ZDe5urVCkK4LJZOsjfF4duRJFU
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
infra/common/nixos/nftables-ruleset.nft
View file

@ -43,7 +43,8 @@ table inet filter {
ip6 nexthdr icmpv6 icmpv6 type { destination-unreachable, echo-reply, echo-request, nd-neighbor-solicit, nd-router-advert, nd-neighbor-advert, packet-too-big, parameter-problem, time-exceeded } accept
# open tcp ports: sshd (22)
tcp dport {ssh} accept
# 8080: used in atticd
tcp dport {ssh,8080} accept
# open tcp ports: snmp (161)
ip saddr $snmp_allow udp dport {snmp} accept