philipp/uncloud
1
0
Fork 0
mirror of https://github.com/psviderski/uncloud.git synced 2026-08-26 11:03:34 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: allow to customise WireGuard listen port with --wg-port for machine init/add (#366)

Browse Source
This commit is contained in:
Aaron Echols
2026-05-19 16:55:55 +10:00
committed by GitHub
parent c95136eae6
commit 424263bdd4
17 changed files with 388 additions and 176 deletions
Download Patch File Download Diff File Expand all files Collapse all files
internal/machine/firewall/iptables_darwin.go
+1 -1
View File
@@ -6,7 +6,7 @@ import (
)
// ConfigureIptablesChains is a stub for Darwin.
func ConfigureIptablesChains(machineIP netip.Addr) error {
func ConfigureIptablesChains(machineIP netip.Addr, wgPort int) error {
return fmt.Errorf("not supported on Darwin")
}
internal/machine/firewall/iptables_linux.go
+2 -2
View File
@@ -19,7 +19,7 @@ const (
)
// ConfigureIptablesChains sets up custom iptables chains and initial firewall rules for Uncloud networking.
func ConfigureIptablesChains(machineIP netip.Addr) error {
func ConfigureIptablesChains(machineIP netip.Addr, wgPort int) error {
if err := createIptablesChains(); err != nil {
return err
}
@@ -30,7 +30,7 @@ func ConfigureIptablesChains(machineIP netip.Addr) error {
// Allow WireGuard traffic to the machine.
acceptWireGuardRule := []string{
"-p", "udp",
"--dport", strconv.Itoa(network.WireGuardPort),
"--dport", strconv.Itoa(wgPort),
"-j", "ACCEPT",
}
// Allow cluster machines to access the unregistry (embedded image registry) on the machine to push/pull images.