From 5c1f0e17b8b0e9ebba6078854c1224e7f5d93ac2 Mon Sep 17 00:00:00 2001
From: Jan Tuomi <jan@jantuomi.fi>
Date: Sun, 30 Nov 2025 11:50:29 +0200
Subject: pf changes

---
 templates/ingress/etc_pf.conf.j2 | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'templates/ingress')

diff --git a/templates/ingress/etc_pf.conf.j2 b/templates/ingress/etc_pf.conf.j2
index 3cdad6e..feb35d5 100644
--- a/templates/ingress/etc_pf.conf.j2
+++ b/templates/ingress/etc_pf.conf.j2
@@ -16,5 +16,7 @@ nat on $wan from $lan_net to any -> ($wan)
 # NAT will be applied automatically when source is in $lan_net and going out $wan
 pass out on $wan all keep state
 pass out on $lan all keep state
+
+pass in on $wan inet proto {tcp, udp} from any to any port {80, 443} keep state
 {% endif %}
 {% endfor %}
-- 
cgit v1.3