diff options
| author | Paul Buetow <paul@buetow.org> | 2023-12-24 23:58:28 +0200 |
|---|---|---|
| committer | Paul Buetow <paul@buetow.org> | 2023-12-24 23:58:28 +0200 |
| commit | 11c200faf0f93b2abfc5d29573c3ff64a485a621 (patch) | |
| tree | c29f6f2eb0161a16c4557adb03be5aca1516abf1 /org-buetow-base | |
| parent | 9951e32a37dd3d4ba3b2d0b82a4e93b2f1ae6055 (diff) | |
syncthing works
Diffstat (limited to 'org-buetow-base')
| -rw-r--r-- | org-buetow-base/network.tf | 32 |
1 files changed, 13 insertions, 19 deletions
diff --git a/org-buetow-base/network.tf b/org-buetow-base/network.tf index ad95ff4..97e0bd8 100644 --- a/org-buetow-base/network.tf +++ b/org-buetow-base/network.tf @@ -97,13 +97,14 @@ resource "aws_security_group" "allow_web" { ipv6_cidr_blocks = ["::/0"] } - ingress { - from_port = 8080 - to_port = 8080 - protocol = "tcp" - cidr_blocks = ["0.0.0.0/0"] - ipv6_cidr_blocks = ["::/0"] - } + # syncthing testing. TODO: Remove? + # ingress { + # from_port = 8384 + # to_port = 8384 + # protocol = "tcp" + # cidr_blocks = ["0.0.0.0/0"] + # ipv6_cidr_blocks = ["::/0"] + #} ingress { from_port = 443 @@ -112,14 +113,6 @@ resource "aws_security_group" "allow_web" { cidr_blocks = ["0.0.0.0/0"] ipv6_cidr_blocks = ["::/0"] } - - egress { - from_port = 0 - to_port = 0 - protocol = "-1" - cidr_blocks = ["0.0.0.0/0"] - ipv6_cidr_blocks = ["::/0"] - } } resource "aws_security_group" "allow_outbound" { @@ -128,9 +121,10 @@ resource "aws_security_group" "allow_outbound" { vpc_id = aws_vpc.vpc.id egress { - from_port = 0 - to_port = 0 - protocol = "-1" # -1 means all protocols - cidr_blocks = ["0.0.0.0/0"] # Allows outbound traffic to all IP addresses + from_port = 0 + to_port = 0 + protocol = "-1" # -1 means all protocols + cidr_blocks = ["0.0.0.0/0"] # Allows outbound traffic to all IP addresses + ipv6_cidr_blocks = ["::/0"] } } |