From f0947f3ce003681a7fe2cdc28a206c95267c2f61 Mon Sep 17 00:00:00 2001
From: oqyude <oqyude@gmail.com>
Date: Thu, 24 Sep 2026 22:11:23 +0300
Subject: [PATCH] 3x

---
 modules/containers/3x-ui.nix | 36 ++++++++++++++++++++++++------------
 1 file changed, 24 insertions(+), 12 deletions(-)

diff --git a/modules/containers/3x-ui.nix b/modules/containers/3x-ui.nix
index fe28152..f071414 100644
--- a/modules/containers/3x-ui.nix
+++ b/modules/containers/3x-ui.nix
@@ -25,8 +25,12 @@ let
     # 14380-15379/tcp+udp — Xray inbounds (matches firewall open range)
     "0.0.0.0:2049:2049/tcp"
     "0.0.0.0:2096:2096/tcp"
-    "0.0.0.0:14380-15379:14380-15379/tcp"
-    "0.0.0.0:14380-15379:14380-15379/udp"
+    "0.0.0.0:8443:8443/tcp"
+    "0.0.0.0:8443:8443/udp"
+    "0.0.0.0:18443:18443/tcp"
+    "0.0.0.0:18443:18443/udp"
+    # "0.0.0.0:14380-15379:14380-15379/tcp"
+    # "0.0.0.0:14380-15379:14380-15379/udp"
   ];
   # VDS-only: nginx stream forwards host:443 → host:15380 → container:443,
   # so Xray inside the container sees its REALITY inbound on its real
@@ -113,17 +117,25 @@ in
 
   # Enable container name DNS for all Podman networks.
   networking.firewall = {
-    allowedUDPPortRanges = [
-      {
-        from = 14380;
-        to = 15380;
-      }
+    # allowedUDPPortRanges = [
+    #   {
+    #     from = 8443;
+    #     to = 15380;
+    #   }
+    # ];
+    # allowedTCPPortRanges = [
+    #   {
+    #     from = 14380;
+    #     to = 15380;
+    #   }
+    # ];
+    allowedUDPPorts = [
+      18443
+      8443
     ];
-    allowedTCPPortRanges = [
-      {
-        from = 14380;
-        to = 15380;
-      }
+    allowedTCPPorts = [
+      18443
+      8443
     ];
     interfaces =
       let