Allow on all interfaces and on ipv6

This commit is contained in:
Micke Nordin 2024-12-24 10:11:12 +01:00
parent 32339a3fbf
commit 9ef9bab2cd

View file

@ -409,9 +409,9 @@ MACAddressPolicy=none'
}
if $::facts['sunet_nftables_enabled'] == 'yes' {
sunet::nftables::docker_expose { "https_port_${customer}":
allow_clients => '0.0.0.0',
allow_clients => ['0.0.0.0', '::/0'],
port => $https_port,
iif => 'ens3',
iif => '*',
}
} else {
# Open ports