open node ports

This commit is contained in:
NyxErinys 2026-05-27 03:27:09 -05:00
parent 0a51eebcb0
commit 1b2b582c80

View file

@ -16,12 +16,16 @@ in
config = mkIf cfg.enable {
networking.firewall.allowedTCPPorts = [
6443 # k3s: required so that pods can reach the API server (running on port 6443 by default)
2379 # k3s, etcd clients: required if using a "High Availability Embedded etcd" configuration
2380 # k3s, etcd peers: required if using a "High Availability Embedded etcd" configuration
6443 # k3s, api server
2379 # k3s, etcd clients
2380 # k3s, etcd peers
10250 # k3s, kubelet
];
networking.firewall.allowedUDPPorts = [
8472 # k3s, flannel: required if using multi-node for inter-node networking
8472 # k3s, flannel
];
networking.firewall.allowedTCPPortRanges = [
{ from = 30000; to = 32767; } # k3s, nodeport
];
environment.systemPackages = with pkgs; [