K3s: Difference between revisions

@@ Line 5: / Line 5: @@
 <syntaxHighlight lang=nix>
 {
-   # This is required so that pod can reach the API server (running on port 6443 by default)
-   networking.firewall.allowedTCPPorts = [ 6443 ];
+   networking.firewall.allowedTCPPorts = [
+# k3s: required so that pods can reach the API server (running on port 6443 by default)
+    # 2379 # k3s, etcd clients: required if using a "High Availability Embedded etcd" configuration
+    # 2380 # k3s, etcd peers: required if using a "High Availability Embedded etcd" configuration
+   ];
    services.k3s.enable = true;
    services.k3s.role = "server";