From 3da205a190c0b6f36a726d90afa4dc303ee84ffe Mon Sep 17 00:00:00 2001 From: Emil Renner Berthing Date: Tue, 19 Jan 2021 19:20:48 +0100 Subject: space_server: certbot: get space.labitat.dk certificate --- roles/space_server/files/nftables.conf | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'roles/space_server/files') diff --git a/roles/space_server/files/nftables.conf b/roles/space_server/files/nftables.conf index 066c03e..3375826 100644 --- a/roles/space_server/files/nftables.conf +++ b/roles/space_server/files/nftables.conf @@ -103,6 +103,9 @@ table ip filter { ip daddr 224.0.0.251 udp dport 5353 iif $avahi_ifs accept ip protocol igmp iif $avahi_ifs accept + # http cert validation + tcp dport 80 ip daddr $ext_ip4 accept + ## debugging #iif $ext_if counter drop #udp dport { 137, 138, 5353, 27036 } drop # NetBIOS, Avahi, Steam in-home stream @@ -182,6 +185,9 @@ table ip6 filter { # avahi ip6 daddr ff02::fb udp dport 5353 iif $avahi_ifs accept + # http cert validation + tcp dport 80 ip6 daddr $ext_ip6 accept + ## debugging #counter log prefix "in6: " drop drop -- cgit v1.2.1