diff options
| author | Emil Renner Berthing <esmil@labitat.dk> | 2021-01-19 19:20:48 +0100 |
|---|---|---|
| committer | Emil Renner Berthing <esmil@labitat.dk> | 2021-01-19 22:39:39 +0100 |
| commit | 3da205a190c0b6f36a726d90afa4dc303ee84ffe (patch) | |
| tree | a77a5d2f52916b3b935941d81565faf9760a536d /roles/space_server/files | |
| parent | 1e59205900d8037d13290832625041f3edde0cac (diff) | |
| download | labitat-ansible-3da205a190c0b6f36a726d90afa4dc303ee84ffe.tar.gz labitat-ansible-3da205a190c0b6f36a726d90afa4dc303ee84ffe.tar.xz labitat-ansible-3da205a190c0b6f36a726d90afa4dc303ee84ffe.zip | |
space_server: certbot: get space.labitat.dk certificate
Diffstat (limited to 'roles/space_server/files')
| -rw-r--r-- | roles/space_server/files/nftables.conf | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/roles/space_server/files/nftables.conf b/roles/space_server/files/nftables.conf index 066c03e..3375826 100644 --- a/roles/space_server/files/nftables.conf +++ b/roles/space_server/files/nftables.conf @@ -103,6 +103,9 @@ table ip filter { ip daddr 224.0.0.251 udp dport 5353 iif $avahi_ifs accept ip protocol igmp iif $avahi_ifs accept + # http cert validation + tcp dport 80 ip daddr $ext_ip4 accept + ## debugging #iif $ext_if counter drop #udp dport { 137, 138, 5353, 27036 } drop # NetBIOS, Avahi, Steam in-home stream @@ -182,6 +185,9 @@ table ip6 filter { # avahi ip6 daddr ff02::fb udp dport 5353 iif $avahi_ifs accept + # http cert validation + tcp dport 80 ip6 daddr $ext_ip6 accept + ## debugging #counter log prefix "in6: " drop drop |