Skip to content

feat: add nethsupport UI on port 8443 with automatic firewall rules#1565

Draft
stephdl wants to merge 9 commits intomainfrom
sdl-1542-nginx-custom-port
Draft

feat: add nethsupport UI on port 8443 with automatic firewall rules#1565
stephdl wants to merge 9 commits intomainfrom
sdl-1542-nginx-custom-port

Conversation

@stephdl
Copy link
Contributor

@stephdl stephdl commented Mar 9, 2026

  • Add support for netlsupport-specific nginx instance on port 8443
  • Automatically activate/deactivate UI when don service starts/stops
  • Configure firewall zone 'don' for tunDON interface
  • Create firewall rule to allow port 8443 from VPN tunnel to LAN
  • Refactor ns-ui script to support multiple custom ports via function
  • Use same SSL certificate and backend API as main UI

When don start is executed:

  • Enables port 8443 for nethsupport UI
  • Creates firewall zone for tunDON interface
  • Creates accept rule for port 8443 from don zone

When don stop is executed:

  • Disables port 8443
  • Removes firewall rules and zone

#1542

@stephdl stephdl marked this pull request as draft March 9, 2026 15:09
@stephdl stephdl force-pushed the sdl-1542-nginx-custom-port branch 2 times, most recently from 1643308 to 12a1e9c Compare March 9, 2026 15:31
stephdl added 7 commits March 9, 2026 17:30
- Add support for netlsupport-specific nginx instance on port 8443
- Automatically activate/deactivate UI when don service starts/stops
- Configure firewall zone 'don' for tunDON interface
- Create firewall rule to allow port 8443 from VPN tunnel to LAN
- Refactor ns-ui script to support multiple custom ports via function
- Use same SSL certificate and backend API as main UI

When don start is executed:
- Enables port 8443 for nethsupport UI
- Creates firewall zone for tunDON interface
- Creates accept rule for port 8443 from don zone

When don stop is executed:
- Disables port 8443
- Removes firewall rules and zone
Since we now call /usr/sbin/ns-ui directly in the don script,
we no longer need the reload_service() function in the init script.
This simplifies the code and avoids an unnecessary layer of indirection.
@stephdl stephdl force-pushed the sdl-1542-nginx-custom-port branch from ee14c4d to 99300f8 Compare March 9, 2026 16:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant