--- id: infra/ufw-blocks-port-9010-on-the-lan title: "`ufw` blocks port 9010 on the LAN" theme: infra status: open created: 2026-08-20 date_source: assumed order: 2 --- **`ufw` blocks port 9010 on the LAN.** Default deny incoming; only `22/tcp`, `80/tcp`, `443/tcp`, and everything on `tailscale0` are allowed — so `http://192.168.47.196:9010` is unreachable from the LAN while localhost and Tailscale work. Fix: `sudo ufw allow from 192.168.47.0/24 to any port 9010 proto tcp`