1
0
Fork 0
mirror of https://code.forgejo.org/infrastructure/documentation synced 2024-11-22 03:21:10 +00:00

Merge pull request 'note on Hetzner firewall' (#17) from earl-warren/documentation:wip-k8s-network into main

Reviewed-on: https://code.forgejo.org/infrastructure/documentation/pulls/17
This commit is contained in:
earl-warren 2024-10-05 10:25:12 +00:00
commit aeda8706d3

View file

@ -63,6 +63,13 @@ lxc-helpers.sh lxc_install_lxc $name $ipv4 $ipv6
lxc-helpers.sh lxc_container_user_install $name $(id -u) $USER lxc-helpers.sh lxc_container_user_install $name $(id -u) $USER
``` ```
## firewall
Hetzner hosts have a firewall that must be configured from
https://robot.hetzner.com/server to only allow incoming ssh, http,
https requests for both IPv4 & IPv6. Each server has a "Firewall" tab
that provides control over this firewall.
## nftables ## nftables
```sh ```sh