From 984f205c7b319cbc55554adae5e3dd6a3786d6af Mon Sep 17 00:00:00 2001 From: Patrick Spek Date: Mon, 4 Mar 2024 10:33:44 +0000 Subject: Add nftables to ricui --- hosts.d/ricui.tyil.net | 5 +++++ registry.d/ricui.tyil.net | 1 + 2 files changed, 6 insertions(+) diff --git a/hosts.d/ricui.tyil.net b/hosts.d/ricui.tyil.net index 777d17e..740114d 100644 --- a/hosts.d/ricui.tyil.net +++ b/hosts.d/ricui.tyil.net @@ -1,4 +1,9 @@ meta.provider=hetzner +nftables.input.interfaces.cilium*.policy=accept +nftables.input.interfaces.lxc*.policy=accept +nftables.input.rules.kubelet.policy=accept +nftables.input.rules.kubelet.port=10250 +nftables.input.rules.kubelet.proto=tcp vpn-tinc.ipv4=10.57.20.7 vpn-tinc.ipv6=fd68:1057:1992:3381:0:1:1:2 vpn-wireguard.endpoint=2a01:4f8:1c1b:67d7::1 diff --git a/registry.d/ricui.tyil.net b/registry.d/ricui.tyil.net index ac65e43..6f38e85 100644 --- a/registry.d/ricui.tyil.net +++ b/registry.d/ricui.tyil.net @@ -1,3 +1,4 @@ +nftables ssh vpn-tinc vpn-wireguard -- cgit v1.1