Networking
This page covers DNS configuration, network topology, and connectivity patterns used across the infrastructure.
DNS Setup
All services use subdomains under hawknest.ru. DNS
records point to the server's public IP address. Wildcard DNS
is configured via CoreDNS for development convenience.
Port Allocation
| Port | Protocol | Purpose |
|---|---|---|
| 443 | TCP | HTTPS (Traefik) |
| 80 | TCP | HTTP redirect to HTTPS |
Internal Communication
Services communicate over Docker networks. Only Traefik exposes
ports to the public internet. All other services bind to
127.0.0.1 or use internal Docker networking.
Security note: Never expose admin ports or unencrypted service ports to the public internet. Use Traefik for all external access.
Firewall Rules
The hosting provider's firewall allows only ports 22 (SSH), 80 (HTTP), and 443 (HTTPS). All other ports are blocked at the network level.