Fix firewall rules for certificate renewal.

2026-05-30 17:02:01 -04:00
1 changed files with 2 additions and 0 deletions
--- a/ansible/roles/firewall/files/homeserver_pf.conf
+++ b/ansible/roles/firewall/files/homeserver_pf.conf
@@ -64,3 +64,5 @@ pass in on $ext_if proto udp to (wlan0) port $udp_pass_in
 pass in on restricted_nat proto {udp, tcp} from 10.215.2.2 to any port { 53 51820 } tag NATOUT
 # bastion -> cloak
 pass in on jail_nat proto {udp, tcp} from 10.215.1.217 to 10.215.2.2 port 8081 tag NATRESTRICTED
+# Allow outgoing connections from certificate
+pass in on jail_nat proto {udp, tcp} from 10.215.1.220 to any port { 53 80 443 } tag NATOUT