From 700161ffd0a24cf0ea133e161bec42e601cd48fb Mon Sep 17 00:00:00 2001 From: Sergei Poljanski Date: Fri, 13 Nov 2026 07:58:09 +0400 Subject: [PATCH] firewall: open port 80 on asxpio-services xmpp.asxp.io and conference.asxp.io point at services, so the Let's Encrypt HTTP challenge for the XMPP certificate arrives there. Only /.well-known/acme-challenge/ is answered (forwarded to Traefik on ops); everything else gets a 404. Assisted-by: Claude:opus-5-5 --- terraform/firewall.tf | 1 + 1 file changed, 1 insertion(+) diff --git a/terraform/firewall.tf b/terraform/firewall.tf index 58c1718..df48246 100644 --- a/terraform/firewall.tf +++ b/terraform/firewall.tf @@ -16,6 +16,7 @@ locals { { protocol = "tcp", port = "25565" }, # Minecraft (Paper) { protocol = "udp", port = "19132" }, # Minecraft Bedrock (Geyser) { protocol = "tcp", port = "443" }, # Xray VLESS Reality + { protocol = "tcp", port = "80" }, # ACME HTTP challenges, forwarded to Traefik on ops { protocol = "tcp", port = "5222-5223" }, # XMPP clients (STARTTLS, TLS) { protocol = "tcp", port = "5269" }, # XMPP servers { protocol = "tcp", port = "5443" }, # XMPP WebSocket, host-meta