From e1e05c641b2aa59c68e4027de07e5d3812111b57 Mon Sep 17 00:00:00 2001
From: Khue Doan <mail@khuedoan.com>
Date: Tue, 30 Dec 2025 18:45:58 +0700
Subject: [PATCH] docs: add firewall rules note

---
 README.md | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/README.md b/README.md
index 9e3f069..015b960 100644
--- a/README.md
+++ b/README.md
@@ -162,6 +162,9 @@ make
     - 22
     - 51820 and 51821 (for Wireguard IPv4 and IPv6)
   - NixOS, with SSH access
+- Firewall rules (currently manually managed in routers):
+  - TCP: 6443 (Kube API), 443 (HTTPS), 80 (HTTP), 10250 (Kubelet metrics), 22 (SSH)
+  - UDP: 51820 (Wireguard IPv4), 51821 (Wireguard IPv6)
 
 ## Acknowledgments and References
 
-- 
2.51.2