ufw rules

2022-11-18 14:01:16 +00:00
parent 4206ffb5b7
commit 96567c54dc
10 changed files with 53 additions and 8 deletions
@@ -1,5 +1,5 @@
 CMDARGS                         += node-exec stack-node-exec node-exec:% node-exec@% node-run node-run:% node-run@%
-node                            ?= node/autoheal node/certbot node/consul node/fabio node/registrator
+node                            ?= $(patsubst stack/%,%,$(patsubst %.yml,%,$(wildcard stack/node/*.yml)))
 ENV_VARS                        += DOCKER_HOST_IFACE DOCKER_HOST_INET4 DOCKER_INTERNAL_DOCKER_HOST
 SETUP_LETSENCRYPT               ?=

@@ -2,3 +2,6 @@ NODE_CONSUL_ACL_TOKENS_MASTER=01234567-89AB-CDEF-0123-456789ABCDEF
 NODE_CONSUL_HTTP_TOKEN=01234567-89AB-CDEF-0123-456789ABCDEF
 NODE_CONSUL_SERVICE_8500_TAGS=urlprefix-consul.${DOMAIN}/
 NODE_FABIO_SERVICE_9998_TAGS=urlprefix-fabio.${DOMAIN}/
+UFW_UPDATE_node-certbot=53/udp
+UFW_UPDATE_node-consul=8500
+UFW_DOCKER_node-fabio=80 443
@@ -7,3 +7,4 @@ NODE_IPFS_PUBSUB_ROUTER=gossipsub
 NODE_IPFS_ROUTING_TYPE=dht
 NODE_IPFS_SERVICE_8080_CHECK_HTTP=/ipfs/QmYwAPJzv5CZsnA625s3Xf2nemtYgPpHdWEz79ojWnPbdG/readme
 NODE_IPFS_SERVICE_8080_TAGS=urlprefix-ipfs.${DOMAIN}/
+UFW_DOCKER_node-ipfs=4001/tcp 4001/udp 8080
@@ -2,3 +2,4 @@ NODE_MAILSERVER_ENABLE_MANAGESIEVE=1
 NODE_MAILSERVER_SPOOF_PROTECTION=1
 NODE_MAILSERVER_SSL_TYPE=letsencrypt
 NODE_MAILSERVER_UPDATE_CHECK=0
+UFW_DOCKER_node-mailserver=25 465 587 993