From 5b2627373e77040aa77fc05778c4712b22894aa4 Mon Sep 17 00:00:00 2001 From: jakub961241 <144362244+jakub961241@users.noreply.github.com> Date: Sun, 22 Mar 2026 00:42:45 +0100 Subject: [PATCH] fix: auto-allow firewall port when creating website with non-standard port (#12233) When creating a new website with a non-standard port, the firewall was not automatically updated. The getWebsiteDomains() return value for addPorts was being discarded. This already worked correctly when adding domains to an existing website (website_domain.go:35). Now calls OperateFirewallPort() with the new ports, matching the existing behavior in CreateWebsiteDomain. Fixes #12233 --- agent/app/service/website.go | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/agent/app/service/website.go b/agent/app/service/website.go index 2c006878eed1..d65be68f7a9c 100644 --- a/agent/app/service/website.go +++ b/agent/app/service/website.go @@ -302,10 +302,16 @@ func (w WebsiteService) CreateWebsite(create request.WebsiteCreate) (err error) } } } else { - domains, _, _, err = getWebsiteDomains(create.Domains, defaultHttpPort, nginxInstall.HttpsPort, 0) + var addPorts []int + domains, addPorts, _, err = getWebsiteDomains(create.Domains, defaultHttpPort, nginxInstall.HttpsPort, 0) if err != nil { return err } + if len(addPorts) > 0 { + go func() { + _ = OperateFirewallPort(nil, addPorts) + }() + } primaryDomain = domains[0].Domain if domains[0].Port != defaultHttpPort { primaryDomain = fmt.Sprintf("%s:%v", domains[0].Domain, domains[0].Port)