table <jails> persist

ext_if = "em0"        # macro for external interface - use tun0 for PPPoE
int_if = "bridge0"    # macro for internal interface
localnet = $int_if:network
nat on $ext_if from $localnet to any -> ($ext_if)
nat on wg0 from $localnet to any -> (wg0)

rdr-anchor "rdr/*"

## Manually Redirect to Jail
# Grafana
rdr pass on em0 inet proto tcp from any to any port = 3000 -> 192.168.200.51 port 3000
rdr pass on wg0 inet proto tcp from any to any port = 3000 -> 192.168.200.51 port 3000

# CouchDB
rdr pass on em0 inet proto tcp from any to any port = 5984 -> 192.168.200.52 port 5984
rdr pass on wg0 inet proto tcp from any to any port = 5984 -> 192.168.200.52 port 5984

# Hosting
# SSH
rdr pass on em0 inet proto tcp from any to any port = 2024 -> 192.168.200.53 port 22
rdr pass on wg0 inet proto tcp from any to any port = 2024 -> 192.168.200.53 port 22
# Web
rdr pass on em0 inet proto tcp from any to any port = 8081 -> 192.168.200.53 port 8081
rdr pass on wg0 inet proto tcp from any to any port = 8081 -> 192.168.200.53 port 8081
# MariaDB
rdr pass on em0 inet proto tcp from any to any port = 3306 -> 192.168.200.53 port 3306
rdr pass on wg0 inet proto tcp from any to any port = 3306 -> 192.168.200.53 port 3306
# Webmin
rdr pass on em0 inet proto tcp from any to any port = 10000 -> 192.168.200.53 port 10000
rdr pass on wg0 inet proto tcp from any to any port = 10000 -> 192.168.200.53 port 10000

# MQTT
rdr pass on em0 inet proto tcp from any to any port = 1883 -> 192.168.200.54 port 1883
rdr pass on wg0 inet proto tcp from any to any port = 1883 -> 192.168.200.54 port 1883

# Uptime-Kuma
rdr pass on em0 inet proto tcp from any to any port = 3001 -> 192.168.200.55 port 3001
rdr pass on wg0 inet proto tcp from any to any port = 3001 -> 192.168.200.55 port 3001