restrict firewall commands to host IP and expose service on all interfaces

docker-compose.yml

@@ -5,7 +5,7 @@ services:
     build: .
     container_name: xivlauncher-remote-otp
     ports:
-      - "127.0.0.1:${WEB_PORT:-8814}:8080"
+      - "${WEB_PORT:-8814}:8080"
     volumes:
       - ./data:/app/data
     environment:

static/app.js

@@ -6,11 +6,15 @@ document.addEventListener('DOMContentLoaded', () => {
     const ufwCmd = document.getElementById('ufw-cmd');
     const iptablesCmd = document.getElementById('iptables-cmd');
 
-    portInput.addEventListener('input', (e) => {
+    const updateFirewallCmds = () => {
-        const port = e.target.value || '4646';
+        const port = portInput.value || '4646';
-        ufwCmd.textContent = `sudo ufw allow ${port}/tcp`;
+        const hostIp = window.location.hostname;
-        iptablesCmd.textContent = `sudo iptables -I INPUT -p tcp --dport ${port} -j ACCEPT`;
+        ufwCmd.textContent = `sudo ufw allow from ${hostIp} to any port ${port} proto tcp`;
-    });
+        iptablesCmd.textContent = `sudo iptables -I INPUT -p tcp -s ${hostIp} --dport ${port} -j ACCEPT`;
+    };
+
+    portInput.addEventListener('input', updateFirewallCmds);
+    updateFirewallCmds();
 
     const fetchInstances = async () => {
         try {