node port forwarding

port_setup.sh

# don't do this until you've got certbot run, otherwise it won't validate
sudo iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 443 -j REDIRECT --to-port 8081
sudo iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 8080
sudo apt install iptables-persistent

# if you need to remove the port forwarding for certbot, these commands list and delete the routes
# sudo iptables -t nat -L --line-numbers
# sudo iptables -t nat -D PREROUTING 2

sudo ufw allow 8081/tcp
sudo ufw allow 8080/tcp

sudo ufw allow ssh
sudo ufw allow http
sudo ufw allow https