System/Servenix: Open TeamSpeak ports

system/servenix/default.nix

@@ -62,21 +62,27 @@
       };
 
       allowedTCPPorts = [
-        53 # DNS
-        80 # HTTP
-        3000 # Gitea runner needs to reach local gitea instance
-        # 9987 # Teamspeak
-        # 30033 # Teamspeak
-        # 10080 # Teamspeak
+        53 # DNS (Adguard Home)
+        67 # DHCP
+        80 # HTTP (Nginx Proxy Manager)
+        443 # HTTPS (Nginx Proxy Manager)
+
+        3000 # Gitea (runner needs to reach local gitea instance)
+
+        30033 # Teamspeak
+        10080 # Teamspeak
       ];
 
       allowedUDPPorts = [
-        53 # DNS
+        53 # DNS (Adguard Home)
         67 # DHCP
-        3000 # Gitea runner needs to reach local gitea instance
-        # 9987 # Teamspeak
-        # 30033 # Teamspeak
-        # 10080 # Teamspeak
+        80 # HTTP (Nginx Proxy Manager)
+        443 # HTTPS (Nginx Proxy Manager)
+
+        3000 # Gitea (runner needs to reach local gitea instance)
+
+        30033 # Teamspeak
+        9987 # Teamspeak
       ];
     };
 

system/services/authelia.nix

@@ -20,9 +20,7 @@ in {
         passwordFile = "${config.sops.secrets.docker-password.path}";
       };
 
-      dependsOn = [
-        # "pihole"
-      ];
+      dependsOn = [];
 
       ports = [
         # "9091:9091"

system/services/formula10.nix

@@ -14,7 +14,7 @@ in {
       dependsOn = [];
 
       ports = [
-        "55555:5000"
+        "55555:5000" # Bind for VPS
       ];
 
       volumes = [

system/services/formula11.nix

@@ -12,12 +12,10 @@ in {
       image = "gitea.vps.chriphost.de/christoph/pocketbase:${pocketbaseVersion}";
       autoStart = true;
 
-      dependsOn = [
-        # "pihole"
-      ];
+      dependsOn = [];
 
       ports = [
-        "8090:8080"
+        "8090:8080" # Bind for VPS
       ];
 
       volumes = [

system/services/gitea.nix

@@ -72,7 +72,7 @@ in {
       ];
 
       ports = [
-        "3000:3000"
+        "3000:3000" # Bind for VPS
 
         # NOTE: Set .git/config url to ssh://christoph@gitea.local.chriphost.de:222/christoph/<repo>.git
         "222:222" # Gitea SSH

system/services/immich.nix

@@ -73,7 +73,7 @@ in {
       ];
 
       ports = [
-        "2283:8080"
+        "2283:8080" # Bind for VPS
       ];
 
       volumes = [

system/services/jellyfin.nix

@@ -25,7 +25,7 @@ in {
       ];
 
       ports = [
-        "8096:8096"
+        "8096:8096" # Bind for VPS
       ];
 
       volumes = [

system/services/nextcloud.nix

@@ -112,7 +112,7 @@ in {
       ];
 
       ports = [
-        "8080:80"
+        "8080:80" # Bind for VPS
       ];
 
       volumes = [

system/services/paperless.nix

@@ -125,7 +125,7 @@ in {
       ];
 
       ports = [
-        "8000:8000"
+        "8000:8000" # Bind for VPS
       ];
 
       volumes = [

system/services/statespaces.nix

@@ -14,7 +14,7 @@ in {
       ports = [
         # "8080:8090"
         # "3111:5173"
-        "3111:8080"
+        "3111:8080" # Bind for VPS
       ];
 
       volumes = [];

system/services/teamspeak.nix

@@ -23,6 +23,7 @@ in {
       dependsOn = [];
 
       ports = [
+        # Bind for VPS
         "9987:9987/udp" # Voice port
         "30033:30033" # File transfer
         "10080:10080/tcp" # Web query