luke-else/server
1
0
Fork 0
Code Issues 5 Pull Requests Projects Releases Wiki Activity

feat: Limited rustdesk to vpn IP only

Browse Source
This commit is contained in:
luke-else
2026-08-06 21:06:50 +01:00
parent 0add4d3221
commit eef5c568bb
11 changed files with 39 additions and 39 deletions
Download Patch File Download Diff File Expand all files Collapse all files
infra/modules/prod/main.tf
+6 -6
View File
@@ -6,7 +6,7 @@ resource "hcloud_firewall" "this" {
direction = "in"
protocol = "tcp"
port = "22"
source_ips = var.allowed_ssh_source_ips
source_ips = var.allowed_source_ips
}
rule { # Traefik http/https
@@ -27,35 +27,35 @@ resource "hcloud_firewall" "this" {
direction = "in"
protocol = "tcp"
port = "21115"
source_ips = ["0.0.0.0/0", "::/0"]
source_ips = var.allowed_source_ips
}
rule {
direction = "in"
protocol = "tcp"
port = "21116"
source_ips = ["0.0.0.0/0", "::/0"]
source_ips = var.allowed_source_ips
}
rule {
direction = "in"
protocol = "udp"
port = "21116"
source_ips = ["0.0.0.0/0", "::/0"]
source_ips = var.allowed_source_ips
}
rule { # rustdesk hbbr
direction = "in"
protocol = "tcp"
port = "21117"
source_ips = ["0.0.0.0/0", "::/0"]
source_ips = var.allowed_source_ips
}
rule {
direction = "in"
protocol = "tcp"
port = "21119"
source_ips = ["0.0.0.0/0", "::/0"]
source_ips = var.allowed_source_ips
}
rule { # traffic from over the private network