Listen up, see? We ironed out some kinks in the operation, made sure everything's on the up-and-up.
- Got the firewalld muscle working proper, no more funny business with the ports.
- Them Podman fellas? They're running on their own turf now, rootless and clean. No more mix-ups with the boss's stuff, see?
- And the Portainer setup? All squared away, no more funny business with the starting.
Everything's on the level now. Capiche?
Ahoy! This be a finer design for our fleet of roles. Instead of a central decree, each role now opens its own ports, as a proper captain should.
- The Portainer role now opens port 9000 for its treasure map (web UI).
- The Network role opens the main cannons (ports 80 & 443 for Nginx) and the secret communication channel (port 51820 for Wireguard).
This makes our roles more modular and seaworthy for future voyages. Yarrr!