wunker-bunker/wunker-os
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add more firewall rules

Browse Source
This commit is contained in:
Gerald Pinder
2025-05-17 22:18:15 -04:00
parent 4adfb4a2ef
commit d51297fec9
10 changed files with 35 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
files/rke-common/etc/NetworkManager/conf.d/rke2-canal.conf Normal file
View File

@@ -0,0 +1,2 @@
[keyfile]
unmanaged-devices=interface-name:flannel*;interface-name:cali*;interface-name:tunl*;interface-name:vxlan.calico;interface-name:vxlan-v6.calico;interface-name:wireguard.cali;interface-name:wg-v6.cali

16
files/rke-common/etc/firewalld/services/rke-common.xml Normal file
View File

@@ -0,0 +1,16 @@
<?xml version="1.0" encoding="utf-8"?>
<service>
<short>RKE Common</short>
<description>Common ports for RKE services.</description>
<port protocol="tcp" port="10250"/>
<port protocol="tcp" start="30000" end="32767"/>
<port protocol="udp" port="8472"/>
<port protocol="tcp" port="9099"/>
<port protocol="udp" port="51820"/>
<port protocol="udp" port="51821"/>
<port protocol="tcp" port="179"/>
<port protocol="udp" port="4789"/>
<port protocol="tcp" port="5473"/>
<port protocol="tcp" port="9098"/>
<port protocol="tcp" port="9099"/>
</service>

3
files/rke-common/etc/sudoers.d/99_rke2 Normal file
View File

@@ -0,0 +1,3 @@
Cmnd_Alias RKE_CMDS = /usr/bin/chown, /usr/bin/chmod, /usr/bin/mkdir, /usr/bin/systemctl, /usr/bin/cp, /usr/bin/find, /usr/bin/ls, /usr/bin/reboot, /usr/bin/install, /usr/bin/rke2, /usr/bin/firewall-cmd
rke ALL=(root) NOPASSWD: RKE_CMDS