cluster-docs

commit d97138e7b250a49848fa54f00bdd49a2378f1e71
parent 2219589cbce9026178577ceb94c4cd4fbc8cddcd
Author: MTRNord <mtrnord1@gmail.com>
Date:   Mon, 31 Mar 2025 12:49:13 +0200

Add firewall

Diffstat:
M
modules/ROOT/nav.adoc
 | 
1
+
M
modules/ROOT/pages/.template.adoc
 | 
1
-
M
modules/ROOT/pages/authentik.adoc
 | 
1
-
M
modules/ROOT/pages/envoy.adoc
 | 
1
-
A
modules/ROOT/pages/firewall.adoc
 | 
25
+++++++++++++++++++++++++

5 files changed, 26 insertions(+), 3 deletions(-)
diff --git a/modules/ROOT/nav.adoc b/modules/ROOT/nav.adoc
@@ -1,6 +1,7 @@
 * Concepts
 * Applications
 * Infrastructure
+** xref:firewall.adoc[]
 ** xref:envoy.adoc[]
 ** xref:authentik.adoc[]
 
diff --git a/modules/ROOT/pages/.template.adoc b/modules/ROOT/pages/.template.adoc
@@ -1,5 +1,4 @@
 = {APPLICATION_NAME} Template
-:doctype: book
 :author: MTRNord
 :revnumber: 1.0
 :revdate: 2025-03-20
diff --git a/modules/ROOT/pages/authentik.adoc b/modules/ROOT/pages/authentik.adoc
@@ -1,5 +1,4 @@
 = Authentik
-:doctype: book
 :author: MTRNord
 :revnumber: 1.0
 :revdate: 2025-03-21
diff --git a/modules/ROOT/pages/envoy.adoc b/modules/ROOT/pages/envoy.adoc
@@ -1,5 +1,4 @@
 = Envoyproxy
-:doctype: book
 :author: MTRNord
 :revnumber: 1.0
 :revdate: 2025-03-21
diff --git a/modules/ROOT/pages/firewall.adoc b/modules/ROOT/pages/firewall.adoc
@@ -0,0 +1,24 @@
+= Firewall
+
+The firewall is managed by kops. However this represents the current setup.
+
+This is done using Hetzner Hardware Firewall.
+This means it defaults to deny any inbound and allow any outgoing.
+
+== Control Plane
+
+[cols="2,2,2,2"]
+|===
+| Direction | IPs | Protocol | Port Range
+| Inbound   | Any | TCP      | 22
+|===
+
+== Nodes
+
+[cols="2,2,2,2"]
+|===
+| Direction | IPs | Protocol | Port Range
+| Inbound   | Any | TCP      | 22
+| Inbound   | Any | TCP      | 30000-32767
+| Inbound   | Any | UDP      | 30000-32767
+|===
+\ No newline at end of file