From 76acc6e772aaceda3d7678f99bcc11307f4aa093 Mon Sep 17 00:00:00 2001 From: Jim Martens Date: Sat, 2 Aug 2025 20:35:15 +0200 Subject: [PATCH] fix: Limit ports to appropriate protocols --- .../docker-network/templates/scripts/firewall-setup.sh.tftpl | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/terraform/modules/docker-network/templates/scripts/firewall-setup.sh.tftpl b/terraform/modules/docker-network/templates/scripts/firewall-setup.sh.tftpl index 2c00074..e411315 100644 --- a/terraform/modules/docker-network/templates/scripts/firewall-setup.sh.tftpl +++ b/terraform/modules/docker-network/templates/scripts/firewall-setup.sh.tftpl @@ -8,8 +8,8 @@ ufw allow 80 comment HTTP ufw allow 443 comment HTTPS %{if main_node ~} -ufw allow to ${node_ip} port 2377 comment "Swarm join port and communication between manager nodes" +ufw allow to ${node_ip} port 2377 proto tcp comment "Swarm join port and communication between manager nodes" %{endif ~} ufw allow to ${node_ip} port 7946 comment "overlay network node discovery" -ufw allow to ${node_ip} port 4789 comment "overlay network traffic" +ufw allow to ${node_ip} port 4789 proto udp comment "overlay network traffic" ufw enable