Sovran_Systems/Sovran_SystemsOS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add dynamic port status detection and improved port forwarding instructions

Browse Source 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/cd52f6a2-250b-49e3-8558-aa2ae7512d1b

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
This commit is contained in:
copilot-swe-agent[bot]
2026-04-03 17:29:02 +00:00
committed by GitHub
parent 0b122d8669
commit df5ad3afe2
5 changed files with 479 additions and 38 deletions
Download Patch File Download Diff File Expand all files Collapse all files

84
modules/core/sovran-manage-domains.nix
View File

@@ -251,6 +251,48 @@ $PENDING_NJALLA"
echo " DDNS script: /var/lib/njalla/njalla.sh"
echo " DDNS cron: Every 15 minutes (already configured)"
echo ""
# ── Port Forwarding Reminder ──────────────────────
INTERNAL_IP=$(hostname -I 2>/dev/null | awk '{print $1}')
printf "%b%s%b\n" "$YELLOW" "══════════════════════════════════════════════" "$NC"
printf "%b ⚠ Port Forwarding Reminder%b\n" "$YELLOW" "$NC"
printf "%b%s%b\n" "$YELLOW" "══════════════════════════════════════════════" "$NC"
echo ""
echo " For your services to be reachable from the internet, you must"
echo " set up PORT FORWARDING in your router's admin panel."
echo ""
if [ -n "$INTERNAL_IP" ]; then
printf " Forward these ports to this machine's internal IP: %b%s%b\n" "$CYAN" "$INTERNAL_IP" "$NC"
else
echo " Forward these ports to this machine's internal LAN IP."
fi
echo ""
echo " 80/TCP — HTTP (redirects to HTTPS)"
echo " 443/TCP — HTTPS (all domain-based services)"
echo " 8448/TCP — Matrix federation (server-to-server)"
echo ""
echo " If you enabled Element Calling, also forward:"
echo " 7881/TCP — LiveKit WebRTC signalling"
echo " 7882-7894/UDP — LiveKit media streams"
echo " 5349/TCP — TURN over TLS"
echo " 3478/UDP — TURN (STUN/relay)"
echo " 30000-40000/TCP+UDP — TURN relay"
echo ""
echo " How: Log into your router (usually 192.168.1.1), find the"
echo " \"Port Forwarding\" section, and add rules for each port above"
if [ -n "$INTERNAL_IP" ]; then
printf " with the destination set to %b%s%b.\n" "$CYAN" "$INTERNAL_IP" "$NC"
else
echo " with the destination set to this machine's IP."
fi
echo ""
echo " These ports only need to be forwarded to this specific machine —"
echo " this does NOT expose your entire network."
echo ""
printf "%b%s%b\n" "$YELLOW" "══════════════════════════════════════════════" "$NC"
echo ""
read -p "Press Enter to continue with the rebuild..."
printf "%b%s%b\n" "$YELLOW" " Rebuilding to activate services with new domains..." "$NC"
echo ""
nixos-rebuild switch --flake /etc/nixos#nixos
@@ -335,6 +377,48 @@ $PENDING_NJALLA"
echo " All configured domains:"
${domainSummary}
echo ""
# ── Port Forwarding Reminder ──────────────────────
INTERNAL_IP=$(hostname -I 2>/dev/null | awk '{print $1}')
printf "%b%s%b\n" "$YELLOW" "══════════════════════════════════════════════" "$NC"
printf "%b ⚠ Port Forwarding Reminder%b\n" "$YELLOW" "$NC"
printf "%b%s%b\n" "$YELLOW" "══════════════════════════════════════════════" "$NC"
echo ""
echo " For your services to be reachable from the internet, you must"
echo " set up PORT FORWARDING in your router's admin panel."
echo ""
if [ -n "$INTERNAL_IP" ]; then
printf " Forward these ports to this machine's internal IP: %b%s%b\n" "$CYAN" "$INTERNAL_IP" "$NC"
else
echo " Forward these ports to this machine's internal LAN IP."
fi
echo ""
echo " 80/TCP — HTTP (redirects to HTTPS)"
echo " 443/TCP — HTTPS (all domain-based services)"
echo " 8448/TCP — Matrix federation (server-to-server)"
echo ""
echo " If you enabled Element Calling, also forward:"
echo " 7881/TCP — LiveKit WebRTC signalling"
echo " 7882-7894/UDP — LiveKit media streams"
echo " 5349/TCP — TURN over TLS"
echo " 3478/UDP — TURN (STUN/relay)"
echo " 30000-40000/TCP+UDP — TURN relay"
echo ""
echo " How: Log into your router (usually 192.168.1.1), find the"
echo " \"Port Forwarding\" section, and add rules for each port above"
if [ -n "$INTERNAL_IP" ]; then
printf " with the destination set to %b%s%b.\n" "$CYAN" "$INTERNAL_IP" "$NC"
else
echo " with the destination set to this machine's IP."
fi
echo ""
echo " These ports only need to be forwarded to this specific machine —"
echo " this does NOT expose your entire network."
echo ""
printf "%b%s%b\n" "$YELLOW" "══════════════════════════════════════════════" "$NC"
echo ""
read -p "Press Enter to continue with the rebuild..."
printf "%b%s%b\n" "$YELLOW" " Rebuilding to activate services with new domains..." "$NC"
echo ""
nixos-rebuild switch --impure