Server/ Firewall

Firewall

ts-cloud reconciles the host firewall (UFW) from cloud config on every deploy. SSH (22), HTTP (80), and HTTPS (443) are always open and cannot be changed here.

cloud server:secure stacks-production-app

Always open

These ports keep SSH, HTTP, and HTTPS reachable. They are read-only and managed by the framework.

Allow a port

{{ message() }}

Managed ports

No extra ports configuredOnly 22, 80, and 443 are open. Allow a port above to update infrastructure.compute.firewall.
Type {{ confirmTok() }} to remove this port:

Ports are declarative: this page edits infrastructure.compute.firewall in cloud config and applies ufw allow / ufw delete allow live on the box. The full config is reconciled again on the next cloud deploy.