imterah/kittehcluster
Archived
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

chore: Reconfigure firewall rules.

Browse source
This commit is contained in:
greysoh 2024-07-13 18:35:42 -04:00
parent 3588bf43b9
commit 47271abd69
Signed by: imterah
GPG key ID: 8FA7DD57BA6CEA37
4 changed files with 78 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

16
kitteh-node-1/agent.nix
View file

@ -25,7 +25,6 @@ in {
enable = true; enable = true;
settings = { settings = {
PasswordAuthentication = false; PasswordAuthentication = false;
X11Forwarding = true;
}; };
}; };
@ -55,5 +54,20 @@ in {
bottom bottom
]; ];
# K3s settings
networking.firewall = {
enable = true;
allowedTCPPorts = [
6443
2379
2380
];
allowedUDPPorts = [
8472
];
};
system.stateVersion = "24.05"; system.stateVersion = "24.05";
} }

25
kitteh-node-1/server.nix
View file

@ -24,7 +24,6 @@ in {
enable = true; enable = true;
settings = { settings = {
PasswordAuthentication = false; PasswordAuthentication = false;
X11Forwarding = true;
}; };
}; };
@ -54,5 +53,29 @@ in {
bottom bottom
]; ];
networking.firewall = {
enable = true;
allowedTCPPorts = [
# Docker swarm
2377
7946
4789
# K3s
6443
2379
2380
];
allowedUDPPorts = [
# Docker swarm
7946
# K3s
8472
];
};
system.stateVersion = "24.05"; system.stateVersion = "24.05";
} }

16
kitteh-node-2/agent.nix
View file

@ -25,7 +25,6 @@ in {
enable = true; enable = true;
settings = { settings = {
PasswordAuthentication = false; PasswordAuthentication = false;
X11Forwarding = true;
}; };
}; };
@ -55,5 +54,20 @@ in {
bottom bottom
]; ];
# K3s settings
networking.firewall = {
enable = true;
allowedTCPPorts = [
6443
2379
2380
];
allowedUDPPorts = [
8472
];
};
system.stateVersion = "24.05"; system.stateVersion = "24.05";
} }

25
kitteh-node-2/server.nix
View file

@ -24,7 +24,6 @@ in {
enable = true; enable = true;
settings = { settings = {
PasswordAuthentication = false; PasswordAuthentication = false;
X11Forwarding = true;
}; };
}; };
@ -54,5 +53,29 @@ in {
bottom bottom
]; ];
networking.firewall = {
enable = true;
allowedTCPPorts = [
# Docker swarm
2377
7946
4789
# K3s
6443
2379
2380
];
allowedUDPPorts = [
# Docker swarm
7946
# K3s
8472
];
};
system.stateVersion = "24.05"; system.stateVersion = "24.05";
} }