wunker-bunker/wunker-os
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add firewall configuration

Browse Source
This commit is contained in:
Gerald Pinder
2025-05-11 15:00:48 -04:00
parent 6980214f02
commit 8724f2e016
3 changed files with 8 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
files/rke_setup/etc/firewalld/services/rke.xml Normal file
View File

@@ -0,0 +1,6 @@
<?xml version="1.0" encoding="utf-8"?>
<service>
<short>RKE API</short>
<description>Open port 6443 for Kubernetes API Server.</description>
<port protocol="tcp" port="6443"/>
</service>

4
files/rke_setup/usr/lib/systemd/system/create_rke_user.service
View File

@@ -7,8 +7,8 @@ Type=oneshot
ExecStart=/usr/libexec/rke2/create_rke_user.sh ExecStart=/usr/libexec/rke2/create_rke_user.sh
# Disable and mask the service after successful execution # Disable and mask the service after successful execution
ExecStartPost=-/bin/systemctl disable --now create_rke_user.service ExecStartPost=-/bin/systemctl disable create_rke_user.service
ExecStartPost=-/bin/systemctl mask --now create_rke_user.service ExecStartPost=-/bin/systemctl mask create_rke_user.service
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target

1
files/rke_setup/usr/libexec/rke2/create_rke_user.sh
View File

@@ -12,4 +12,3 @@ echo "Adding 'rke' to docker group"
usermod -aG docker rke usermod -aG docker rke
echo "Done" echo "Done"
exit 0