jfraeys/infra
Watch
1
0
Fork
You've already forked infra
 0
Code Issues 21 Pull requests 4 Projects Releases Packages Wiki Activity Actions

fix(firewall): LLDAP admin port is tailnet-only #78

Merged
jfraeys merged 2 commits from jfraeys/fix/lldap-admin-tailnet-only into main 2026-10-12 21:45:15 -04:00
Conversation 0 Commits 2 Files changed 3 +42 -3
jfraeys commented 2026-10-12 21:38:01 -04:00
Owner
Copy link

validate-connectivity found services:17170 open to the public internet in staging; a connect to production confirmed the same. Docker-published ports bypass UFW and DOCKER-USER had no rule for 17170. Add tailnet ACCEPT + DROP (v4/v6), tested by running the rendered script twice in a container (idempotent, ACCEPT above DROP). Merging changes production on the next services deploy; tailnet access to LLDAP is unchanged. Details in docs/incidents.md.

🤖 Generated with Claude Code

validate-connectivity found services:17170 open to the public internet in staging; a connect to production confirmed the same. Docker-published ports bypass UFW and DOCKER-USER had no rule for 17170. Add tailnet ACCEPT + DROP (v4/v6), tested by running the rendered script twice in a container (idempotent, ACCEPT above DROP). Merging changes production on the next services deploy; tailnet access to LLDAP is unchanged. Details in docs/incidents.md. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
fix(firewall): LLDAP admin port is tailnet-only (Docker-published ports bypass UFW)
Some checks failed
Lint / lint (pull_request) Has been cancelled
Details
Secret scan / scan (pull_request) Has been cancelled
Details
0cf03c6ae1
 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
docs(incidents): do not claim LLDAP logs were reviewed
All checks were successful
Lint / lint (pull_request) Successful in 2m2s
Details
Secret scan / scan (pull_request) Successful in 15s
Details
9cab7903ef
 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
jfraeys/infra!78
No description provided.