asxpi/iac
1
0
Fork 0
Code Issues Pull requests 3 Projects Releases Packages Wiki Activity Actions

firewall: open port 80 on asxpio-services

Browse source 
xmpp.asxp.io and conference.asxp.io point at services, so the Let's
Encrypt HTTP challenge for the XMPP certificate arrives there. Only
/.well-known/acme-challenge/ is answered (forwarded to Traefik on ops);
everything else gets a 404.

Assisted-by: Claude:opus-5-5
This commit is contained in:
Sergei Poljanski 2026-11-13 07:58:09 +04:00
commit 700161ffd0
Signed by: asxpi
GPG key ID: 4F8851660FA4121B
1 changed files with 1 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
terraform/firewall.tf
View file

@ -16,6 +16,7 @@ locals {
{ protocol = "tcp", port = "25565" }, # Minecraft (Paper) { protocol = "tcp", port = "25565" }, # Minecraft (Paper)
{ protocol = "udp", port = "19132" }, # Minecraft Bedrock (Geyser) { protocol = "udp", port = "19132" }, # Minecraft Bedrock (Geyser)
{ protocol = "tcp", port = "443" }, # Xray VLESS Reality { protocol = "tcp", port = "443" }, # Xray VLESS Reality
{ protocol = "tcp", port = "80" }, # ACME HTTP challenges, forwarded to Traefik on ops
{ protocol = "tcp", port = "5222-5223" }, # XMPP clients (STARTTLS, TLS) { protocol = "tcp", port = "5222-5223" }, # XMPP clients (STARTTLS, TLS)
{ protocol = "tcp", port = "5269" }, # XMPP servers { protocol = "tcp", port = "5269" }, # XMPP servers
{ protocol = "tcp", port = "5443" }, # XMPP WebSocket, host-meta { protocol = "tcp", port = "5443" }, # XMPP WebSocket, host-meta