Allow on all interfaces and on ipv6

This commit is contained in:
Micke Nordin 2024-12-24 10:11:12 +01:00
parent 4bc3a128ac
commit 67b46d3f75

View file

@ -409,9 +409,9 @@ MACAddressPolicy=none'
} }
if $::facts['sunet_nftables_enabled'] == 'yes' { if $::facts['sunet_nftables_enabled'] == 'yes' {
sunet::nftables::docker_expose { "https_port_${customer}": sunet::nftables::docker_expose { "https_port_${customer}":
allow_clients => '0.0.0.0', allow_clients => ['0.0.0.0', '::/0'],
port => $https_port, port => $https_port,
iif => 'ens3', iif => '*',
} }
} else { } else {
# Open ports # Open ports