forgejo/infrastructure-documentation
1
0
Fork 0
mirror of https://code.forgejo.org/infrastructure/documentation synced 2024-12-22 12:53:53 +00:00
Code Issues Activity

k8s ufw firewall

Browse source
This commit is contained in:
Earl Warren 2024-10-17 20:24:03 +02:00
parent d9420f8ac4
commit ab3221ab89
No known key found for this signature in database
GPG key ID: 0579CB2928A78A00
1 changed files with 30 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

30
README.md
View file

@ -65,6 +65,36 @@ lxc-helpers.sh lxc_container_user_install $name $(id -u) $USER
## firewall
```sh
sudo apt-get install ufw
```
```sh
sudo ufw default allow incoming
sudo ufw default allow outgoing
sudo ufw default allow routed
ips="88.198.58.177 2a01:4f8:222:507::2" # host specific
for host_ip in $ips ; do
sudo ufw allow to $host_ip port 22 proto tcp
sudo ufw deny to $host_ip
done
for public_ip in 188.40.16.47 2a01:4f8:fff2:48::2 ; do
sudo ufw allow to $public_ip port 22,80,443,2000:3000 proto tcp
sudo ufw deny to $public_ip
done
```
```sh
sudo systemctl enable ufw
sudo ufw enable
```
```sh
sudo ufw status verbose
```
## nftables