proposal.md 619 B
Why
Trojan service depends on Let's Encrypt TLS certificates obtained via HTTP-01 challenge, which requires port 80 to be accessible for certbot's standalone HTTP server. The landing server's UFW allowed_ports only includes port 443 (Trojan), blocking the Let's Encrypt challenge and preventing certificate issuance.
What Changes
- Add port 80 to
allowed_portsingroup_vars/landing.yml.examplefor Let's Encrypt HTTP-01 challenge
Capabilities
New Capabilities
Modified Capabilities
Impact
group_vars/landing.yml.example: add port 80 toallowed_ports