Firewall Configuration

Based on the deployment plan, the following ports need to be opened on the firewall for the host Scully:

80/tcp: For HTTP traffic, primarily used by Let's Encrypt for certificate validation.
443/tcp: For HTTPS traffic to access all web services.
51820/udp: For the WireGuard VPN tunnel.

No ports need to be opened on the firewall for the host Mulder, as Gitea will be accessed through the reverse proxy on Scully.