From 751d1b083def958e8765c6c06cc2004d93d1e67c Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Thu, 6 Aug 2026 14:55:07 -0400
Subject: [PATCH] Add back port restrictions

---
 server/routers/siteResource/createSiteResource.ts |  8 +++++---
 server/routers/siteResource/updateSiteResource.ts | 10 +++++++---
 2 files changed, 12 insertions(+), 6 deletions(-)

diff --git a/server/routers/siteResource/createSiteResource.ts b/server/routers/siteResource/createSiteResource.ts
index 815d7adb8..31f631ce2 100644
--- a/server/routers/siteResource/createSiteResource.ts
+++ b/server/routers/siteResource/createSiteResource.ts
@@ -605,7 +605,7 @@ export async function createSiteResource(
                 }
 
                 let tcpPortRangeStringAdjusted = tcpPortRangeString;
-                if (mode === "http") {
+                if (mode === "http" || mode === "inference") {
                     tcpPortRangeStringAdjusted = "443,80";
                 } else if (mode === "ssh") {
                     tcpPortRangeStringAdjusted = destinationPort
@@ -628,12 +628,14 @@ export async function createSiteResource(
                     aliasAddress,
                     tcpPortRangeString: tcpPortRangeStringAdjusted,
                     udpPortRangeString:
-                        mode == "http" || mode == "ssh"
+                        mode == "http" || mode == "ssh" || mode == "inference"
                             ? ""
                             : udpPortRangeString,
                     disableIcmp:
                         disableIcmp ||
-                        (mode == "http" || mode == "ssh" ? true : false), // default to true for http resources, otherwise false
+                        (mode == "http" || mode == "ssh" || mode == "inference"
+                            ? true
+                            : false), // default to true for http resources, otherwise false
                     domainId,
                     subdomain: finalSubdomain,
                     fullDomain,
diff --git a/server/routers/siteResource/updateSiteResource.ts b/server/routers/siteResource/updateSiteResource.ts
index 754c82a65..3ec8f7f65 100644
--- a/server/routers/siteResource/updateSiteResource.ts
+++ b/server/routers/siteResource/updateSiteResource.ts
@@ -558,7 +558,7 @@ export async function updateSiteResource(
                     : {};
 
             let tcpPortRangeStringAdjusted = tcpPortRangeString;
-            if (mode === "http") {
+            if (mode === "http" || mode === "inference") {
                 tcpPortRangeStringAdjusted = "443,80";
             } else if (mode === "ssh") {
                 tcpPortRangeStringAdjusted = destinationPort
@@ -585,13 +585,17 @@ export async function updateSiteResource(
                             : undefined,
                     tcpPortRangeString: tcpPortRangeStringAdjusted,
                     udpPortRangeString:
-                        mode == "http" || mode == "ssh"
+                        mode == "http" || mode == "ssh" || mode == "inference"
                             ? ""
                             : udpPortRangeString,
                     disableIcmp:
                         mode !== undefined
                             ? disableIcmp ||
-                              (mode == "http" || mode == "ssh" ? true : false)
+                              (mode == "http" ||
+                              mode == "ssh" ||
+                              mode == "inference"
+                                  ? true
+                                  : false)
                             : disableIcmp,
                     domainId,
                     subdomain: finalSubdomain,