diff --git a/nixos/hosts/framework-server/firewall.nix b/nixos/hosts/framework-server/firewall.nix index 8a1c380d..f4a7009b 100644 --- a/nixos/hosts/framework-server/firewall.nix +++ b/nixos/hosts/framework-server/firewall.nix @@ -14,6 +14,7 @@ 587 # Mailserver 993 # Mailserver 4190 # Mailserver + 4443 # Jitsi ]; allowedUDPPorts = [ 3478 # Headscale DERP (udp) diff --git a/nixos/hosts/osaka-linode-01/firewall.nix b/nixos/hosts/osaka-linode-01/firewall.nix index 70a069c2..e0b7554b 100644 --- a/nixos/hosts/osaka-linode-01/firewall.nix +++ b/nixos/hosts/osaka-linode-01/firewall.nix @@ -14,6 +14,7 @@ 587 # Mailserver 993 # Mailserver 4190 # Mailserver + 4443 # Jitsi ]; allowedUDPPorts = [ 3478 # Headscale DERP (udp) @@ -40,6 +41,7 @@ iifname "enp0s4" tcp dport 1443 dnat to 10.100.0.2:1443; # Headscale DERP (tcp) iifname "enp0s4" udp dport 3478 dnat to 10.100.0.2:3478; # Headscale DERP (udp) iifname "enp0s4" udp dport 10000 dnat to 10.100.0.2:10000; # Headscale DERP (udp) + iifname "enp0s4" tcp dport 4443 dnat to 10.100.0.2:4443; # Jitsi } } ''; @@ -63,6 +65,7 @@ { sourcePort = 1443; proto = "tcp"; destination = "10.100.0.2:1443"; } # Headscale DERP (tcp) { sourcePort = 3478; proto = "udp"; destination = "10.100.0.2:3478"; } # Headscale DERP (udp) { sourcePort = 10000; proto = "udp"; destination = "10.100.0.2:10000"; } # Headscale DERP (udp) + { sourcePort = 4443; proto = "tcp"; destination = "10.100.0.2:4443"; } # Jitsi ]; }; };