From c88cb8d559dc00b7151193930b0a7bdfd6d0abed Mon Sep 17 00:00:00 2001
From: Henrik Bakken <bakken.henrik@gmail.com>
Date: Wed, 17 Sep 2025 21:16:38 +0200
Subject: [PATCH] hetzner ufw settings

---
 hetzner.cfg | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/hetzner.cfg b/hetzner.cfg
index 60b7795..409516e 100644
--- a/hetzner.cfg
+++ b/hetzner.cfg
@@ -33,6 +33,9 @@ runcmd:
   - ufw allow 2222
   - ufw allow 51820/udp
   - ufw allow in on hjarl
+  - ufw allow in on cni0
+  - ufw allow in on flannel.1
+  - ufw allow routed
   - ufw enable
   - sed -i -e '/^\(#\|\)PermitRootLogin/s/^.*$/PermitRootLogin no/' /etc/ssh/sshd_config
   - sed -i -e '/^\(#\|\)PasswordAuthentication/s/^.*$/PasswordAuthentication no/' /etc/ssh/sshd_config