Register GIS LiveKit as docker compose on webservers.

Same deploy path as abc_worker: host_apps on adama/starbuck/etc., NPM for wss://. UDP/7881 still forwarded to one upstream host.

roles/ufw/tasks/main.yml

@@ -28,6 +28,28 @@
     proto: tcp
   loop: "{{ ufw_allowed_tcp_ports }}"
 
+- name: Allow extra TCP ports
+  community.general.ufw:
+    rule: allow
+    port: "{{ item }}"
+    proto: tcp
+  loop: "{{ ufw_extra_tcp_ports | default([]) }}"
+
+- name: Allow extra TCP ports from LAN
+  community.general.ufw:
+    rule: allow
+    port: "{{ item }}"
+    proto: tcp
+    from_ip: "{{ ufw_ssh_allowed_network }}"
+  loop: "{{ ufw_lan_tcp_ports | default([]) }}"
+
+- name: Allow extra UDP ports or ranges
+  community.general.ufw:
+    rule: allow
+    port: "{{ item }}"
+    proto: udp
+  loop: "{{ ufw_extra_udp_ports | default([]) }}"
+
 - name: Enable UFW
   community.general.ufw:
     state: enabled