aboutsummaryrefslogtreecommitdiff
path: root/terraform
diff options
context:
space:
mode:
authorTrygve Laugstøl <trygvis@inamo.no>2024-05-19 19:08:57 +0200
committerTrygve Laugstøl <trygvis@inamo.no>2024-05-19 19:08:57 +0200
commite383539b1fce95acf1287b8e454909a29e4fbdc9 (patch)
tree1c2a87a319ad77fcd65fb1da4ac5e86cbe54fdd2 /terraform
parenta791390832d13ee196f444dec7d1c3df2d15cb48 (diff)
downloadinfra-e383539b1fce95acf1287b8e454909a29e4fbdc9.tar.gz
infra-e383539b1fce95acf1287b8e454909a29e4fbdc9.tar.bz2
infra-e383539b1fce95acf1287b8e454909a29e4fbdc9.tar.xz
infra-e383539b1fce95acf1287b8e454909a29e4fbdc9.zip
unifi-controller: Misc cleanup
Switching back to standard port 8080. Using version for image.
Diffstat (limited to 'terraform')
-rw-r--r--terraform/unifi-controller/main.tf9
-rw-r--r--terraform/unifi-controller/unifi.tf26
2 files changed, 18 insertions, 17 deletions
diff --git a/terraform/unifi-controller/main.tf b/terraform/unifi-controller/main.tf
index 3bf81ae..e0df9bb 100644
--- a/terraform/unifi-controller/main.tf
+++ b/terraform/unifi-controller/main.tf
@@ -23,10 +23,7 @@ provider "docker" {
locals {
domain_name = "unifi.vpn.trygvis.io"
-}
-# variable "foo" {}
-#
-# output "bar" {
-# value = var.foo.value
-# }
+ # docker_image = "lscr.io/linuxserver/unifi-controller:8.0.24"
+ docker_image = "lscr.io/linuxserver/unifi-controller:7.5.187"
+}
diff --git a/terraform/unifi-controller/unifi.tf b/terraform/unifi-controller/unifi.tf
index fc10542..76f6448 100644
--- a/terraform/unifi-controller/unifi.tf
+++ b/terraform/unifi-controller/unifi.tf
@@ -3,7 +3,7 @@ data "docker_network" "traefik" {
}
data "docker_registry_image" "unifi-controller" {
- name = "lscr.io/linuxserver/unifi-controller:latest"
+ name = local.docker_image
}
resource "docker_image" "unifi-controller" {
@@ -28,17 +28,21 @@ resource "docker_container" "unifi-controller" {
dynamic "ports" {
for_each = [
- { port = 161, proto = "udp" },
- { port = 3478, proto = "udp" },
- { port = 6789, proto = "tcp" },
- { port = 8081, proto = "tcp" },
-# { port = 8080, proto = "tcp" }, # not used, we have configured it to 9080
- { port = 9080, proto = "tcp" },
- { port = 8880, proto = "tcp" },
-# { port = 8443, proto = "tcp" },
- { port = 10001, proto = "udp" },
+ # Taken from https://fleet.linuxserver.io/image?name=linuxserver/unifi-controller
+ { port = 1900, proto = "udp" }, # Required for Make controller discoverable on L2 network option
+ { port = 3478, proto = "udp" }, # Unifi STUN port
+ { port = 5514, proto = "tcp" }, # Remote syslog port
+ { port = 6789, proto = "tcp" }, # For mobile throughput test
+ { port = 8080, proto = "tcp" }, # Required for device communication
- # { port = 8843, proto = "tcp" }, web ui
+ # Public HTTP is handled by traefik
+ # { port = 8443, proto = "tcp" }, # Unifi web admin port
+
+ # Not used
+ # { port = 8843, proto = "tcp" }, # Unifi guest portal HTTPS redirect port
+ # { port = 8880, proto = "tcp" }, # Unifi guest portal HTTP redirect port
+
+ { port = 10001, proto = "udp" }, # Required for AP discovery
]
content {
internal = ports.value["port"]