mail

2026-05-24 19:38:38 +02:00
parent 8c66580dab
commit 366a8cc197
35 changed files with 998 additions and 372 deletions
@@ -23,6 +23,20 @@
        name: samba
        route: true

+    - name: Allow Mail
+      community.general.ufw:
+        rule: allow
+        port: '{{ item }}'
+        proto: tcp
+      loop:
+        - "465"
+        - "25"
+        - "587"
+        - "110"
+        - "995"
+        - "143"
+        - "993"
+
    - name: UFW - Allow HTTP connections
      community.general.ufw:
        rule: allow
@@ -44,6 +58,13 @@
        proto: tcp
        route: true

+    - name: UFW - Allow matrix federation
+      community.general.ufw:
+        rule: allow
+        port: "8448"
+        proto: tcp
+        route: true
+
    - name: UFW - Allow podman forwarding
      community.general.ufw:
        rule: allow
@@ -51,6 +72,51 @@
        interface_out: podman+
        route: true

+    - name: UFW - Allow wireguard incoming
+      community.general.ufw:
+        rule: allow
+        interface_in: wg0
+
+    - name: UFW - Allow wireguard outgoing
+      community.general.ufw:
+        rule: allow
+        interface_out: wg0
+
+    - name: UFW - Allow wireguard forwarding
+      community.general.ufw:
+        rule: allow
+        interface_in: wg0
+        interface_out: wg0
+        route: true
+
+    - name: UFW - Allow wireguard to local network
+      community.general.ufw:
+        rule: allow
+        interface_in: wg0
+        interface_out: eth0
+        route: true
+
+    - name: UFW - Allow wireguard to podman
+      community.general.ufw:
+        rule: allow
+        interface_in: wg0
+        interface_out: podman+
+        route: true
+
+    - name: UFW - Allow podman to wireguard
+      community.general.ufw:
+        rule: allow
+        interface_in: podman+
+        interface_out: wg0
+        route: true
+
+    - name: UFW - Allow local network to wireguard
+      community.general.ufw:
+        rule: allow
+        interface_in: eth0
+        interface_out: wg0
+        route: true
+
    - name: UFW - Allow podman forwarding 2
      community.general.ufw:
        rule: allow