diff options
Diffstat (limited to 'snippets/hyperstack/hyperstack-vm2.toml')
| -rw-r--r-- | snippets/hyperstack/hyperstack-vm2.toml | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/snippets/hyperstack/hyperstack-vm2.toml b/snippets/hyperstack/hyperstack-vm2.toml index 6cc6503..e8e9b00 100644 --- a/snippets/hyperstack/hyperstack-vm2.toml +++ b/snippets/hyperstack/hyperstack-vm2.toml @@ -35,12 +35,14 @@ wireguard_subnet = "192.168.3.0/24" # VM2 gets the third server-side WireGuard IP (skipping .2 which is the earth client). # earth (client) is 192.168.3.2; VM1 is 192.168.3.1; VM2 is 192.168.3.3. wireguard_server_ip = "192.168.3.3" +# Secure default: "auto" resolves your current public egress IP to /32 at runtime. +# Override with explicit CIDRs if you deploy from multiple networks or want broader access. +allowed_ssh_cidrs = ["auto"] +allowed_wireguard_cidrs = ["auto"] # Port 11434 is shared by both Ollama and vLLM for firewall compatibility. ollama_port = 11434 # Port 4000: LiteLLM Anthropic-API proxy (used with vLLM). litellm_port = 4000 -allowed_ssh_cidrs = ["0.0.0.0/0"] -allowed_wireguard_cidrs = ["0.0.0.0/0"] [bootstrap] enable_guest_bootstrap = true |