Merge pull request #25 from its-corp/feat/bcn01-lab-nat-ports

feat(bcn01-lab): restrict 1:1 NAT to specific service ports, allow any source
2026-05-07 10:33:53 +02:00
parent 36f08cc7cb 85ef316745
commit 59427707e7
1 changed files with 3 additions and 8 deletions
@@ -7,14 +7,9 @@ locals {
      uplink    = "internet2"
      allowed_inbound = [
        {
-          protocol          = "any"
+          protocol          = "tcp"
-          destination_ports = ["Any"]
+          destination_ports = ["443", "9890", "4769", "8080", "3000", "3333", "8081"]
-          allowed_ips       = ["188.0.0.0/8"]
+          allowed_ips       = ["Any"]
        },
        {
          protocol          = "any"
          destination_ports = ["Any"]
          allowed_ips       = ["57.133.120.176/28"]
        },
      ]
    },