Update firewall for unifi controller virtual machine.

ansible/roles/build/tasks/linux.yaml

@@ -7,8 +7,9 @@
 - name: Install packages
   pacman:
     name:
+      - base-devel
       - gnupg
-      - devtools
+      - devtools # Creates /usr/share/devtools/makepkg-x86_64.conf and provides mkarchroot
       - base-devel
       - vifm
       - vim
@@ -89,7 +90,7 @@
       dest: /etc/pacman.d/conf.d/
     - src: pacman-custom.conf
       dest: /etc/aurutils/
-    - src: makepkg.conf
+    - src: makepkg.conf # TODO: Is this needed or can I use the default from devtools?
       dest: /etc/aurutils/
 
 - name: Create custom repo db

ansible/roles/firewall/files/homeserver_pf.conf

@@ -7,6 +7,7 @@ allow = "{ wgh wgf }"
 
 tcp_pass_in = "{ 22 }"
 udp_pass_in = "{ 53 51820 }"
+unifi_ports = "{ 8443 3478 10001 8080 1900 8843 8880 6789 5514 }"
 
 # Rules must be in order: options, normalization, queueing, translation, filtering
 
@@ -23,6 +24,10 @@ rdr pass on host_uplink1 inet proto {tcp, udp} from any to 10.213.177.1 port 53
 nat pass on host_uplink0 inet proto tcp from any to any port 8081 tag ALLOWED -> (host_uplink0)
 rdr pass on $ext_if inet proto tcp from any to any port 8081 tag ALLOWED -> 10.193.223.20 port 8081
 
+# Forward ports for unifi controller
+rdr pass on $ext_if inet proto tcp from any to any port 65022 tag ALLOWED -> 10.213.177.8 port 22
+rdr pass on $ext_if inet proto {udp, tcp} from any to any port $unifi_ports tag ALLOWED -> 10.213.177.8
+
 # filtering
 block log all
 pass out on $ext_if