# ports.toml — WAN → LAN port forwards for the router (services/router.nix)
#
# Each [[forward]] block adds a DNAT rule from WAN to the LAN IP below.
# Fields:
#   name     — human label, appears in journal logs
#   port     — single port (number), e.g. 443
#   ports    — port range as a string, e.g. "26901-26902"
#   protocol — "tcp", "udp", or "both"
#   dest     — LAN IP to forward to (optional; defaults to 10.0.0.1)

dest_default = "10.0.0.1"

[[forward]]
name = "HTTP"
port = 80
protocol = "tcp"

[[forward]]
name = "HTTPS"
port = 443
protocol = "tcp"

[[forward]]
name = "SSH"
port = 22
protocol = "tcp"

# 7DTD forwards commented out — servers disabled in services/game-servers.nix.
# [[forward]]
# name = "7DTD game"
# port = 26900
# protocol = "both"
#
# [[forward]]
# name = "7DTD voice/dynamic"
# ports = "26901-26902"
# protocol = "udp"
#
# [[forward]]
# name = "7DTD-coop game"
# port = 26910
# protocol = "both"
#
# [[forward]]
# name = "7DTD-coop voice/dynamic"
# ports = "26911-26912"
# protocol = "udp"

# DR (Dungeon Runners) forwards removed — services/dr-server.nix is disabled.
# Re-add 2110 tcp, 2603 both, 2604-2605 udp, 2606 tcp if it comes back.

# WoW Classic server stopped 2026-07-28 (docker containers stopped, not deleted).
# Re-enable both forwards to reopen WAN access.
# [[forward]]
# name = "WoW Classic realmd"
# port = 3724
# protocol = "tcp"
#
# [[forward]]
# name = "WoW Classic worldserver"
# port = 8095
# protocol = "tcp"