will.anderson/infrastructure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Allow NAT-PMP response port through gluetun firewall (FIREWALL_INPUT_PORTS=5351)

Browse Source
This commit is contained in:
Will Anderson
2026-04-11 09:50:55 -05:00
parent 03011a73e8
commit 24e308202b
2 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
servers/legion/k8s/media/fornax-workers.yaml
+4
View File
@@ -60,6 +60,8 @@ spec:
value: "51820" value: "51820"
- name: FIREWALL_OUTBOUND_SUBNETS - name: FIREWALL_OUTBOUND_SUBNETS
value: "10.42.0.0/16,10.43.0.0/16" value: "10.42.0.0/16,10.43.0.0/16"
- name: FIREWALL_INPUT_PORTS
value: "5351"
ports: ports:
- containerPort: 8888 - containerPort: 8888
resources: resources:
@@ -214,6 +216,8 @@ spec:
value: "51820" value: "51820"
- name: FIREWALL_OUTBOUND_SUBNETS - name: FIREWALL_OUTBOUND_SUBNETS
value: "10.42.0.0/16,10.43.0.0/16" value: "10.42.0.0/16,10.43.0.0/16"
- name: FIREWALL_INPUT_PORTS
value: "5351"
ports: ports:
- containerPort: 8888 - containerPort: 8888
resources: resources:
servers/legion/k8s/media/gluetun-qbittorrent.yaml
+2
View File
@@ -56,6 +56,8 @@ spec:
# Allow cluster-internal traffic to bypass VPN (for Radarr/Sonarr → qBittorrent API) # Allow cluster-internal traffic to bypass VPN (for Radarr/Sonarr → qBittorrent API)
- name: FIREWALL_OUTBOUND_SUBNETS - name: FIREWALL_OUTBOUND_SUBNETS
value: "10.42.0.0/16,10.43.0.0/16" value: "10.42.0.0/16,10.43.0.0/16"
- name: FIREWALL_INPUT_PORTS
value: "5351"
ports: ports:
- containerPort: 8888 # gluetun HTTP proxy (unused but required) - containerPort: 8888 # gluetun HTTP proxy (unused but required)
resources: resources: