home/docker
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add UFW firewall rules with port 22 for gitea SSH tunnel

Browse Source 
Added firewall configuration to both setup scripts. New ports:
- 22/tcp (xray tunnel: gitea SSH)
- 10022/tcp (xray bridge: Reality VLESS for gitea SSH)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
eberkheev
2026-03-21 21:38:36 +04:00
co-authored by Claude Opus 4.6
parent ba4b395a4a
commit 822f3b8f8d
2 changed files with 30 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server-setup/manual-setup/setup.sh
+19 -4
View File
@@ -268,7 +268,21 @@ UPDATEEOF
chown "$NEW_USER:$NEW_USER" "$USER_HOME/update.sh"
echo "=== [8/8] Запуск 3x-ui ==="
echo "=== [8/9] Настройка файрвола ==="
ufw default deny incoming
ufw default allow outgoing
ufw allow 22/tcp # tunnel: gitea SSH
ufw allow 80/tcp # tunnel: HTTP
ufw allow 443/tcp # tunnel: HTTPS
ufw allow 10001/tcp # SSH
ufw allow 10003/tcp # vmess VPN
ufw allow 10022/tcp # bridge: gitea SSH (Reality VLESS)
ufw allow 10080/tcp # bridge: HTTP (Reality VLESS)
ufw allow 10443/tcp # bridge: HTTPS (Reality VLESS)
ufw --force enable
echo "UFW настроен"
echo "=== [9/9] Запуск 3x-ui ==="
cd "$XUI_DIR"
docker pull ghcr.io/mhsanaei/3x-ui:latest
docker run -d \
@@ -287,9 +301,10 @@ echo "============================================"
echo " Сервер настроен!"
echo "============================================"
echo ""
echo " SSH: порт $SSH_PORT, пользователь $NEW_USER"
echo " 3x-ui: запущен в Docker (network_mode: host)"
echo " Панель: https://<IP>:10002 (или порт из x-ui.db)"
echo " SSH: порт $SSH_PORT, пользователь $NEW_USER"
echo " 3x-ui: запущен в Docker (network_mode: host)"
echo " Панель: https://<IP>:10002 (или порт из x-ui.db)"
echo " UFW: 22, 80, 443, 10001, 10003, 10022, 10080, 10443"
echo ""
echo " Для обновления: bash ~/update.sh"
echo " Для проверки: docker ps"