From 49581536c16626ec81835ba1bc3ee7d2d9f57ebe Mon Sep 17 00:00:00 2001
From: Hari <73809867+harivansh-afk@users.noreply.github.com>
Date: Tue, 31 Mar 2026 16:16:44 -0400
Subject: [PATCH] update readme (#13)

* update

* update readme

* update
---
 README.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/README.md b/README.md
index d887d6c..8744da8 100644
--- a/README.md
+++ b/README.md
@@ -28,8 +28,8 @@ Secrets live in Bitwarden and are rendered at activation time using cli
 Deployment is `just switch` for the laptop and `just switch-netty` for the server.
 
 The VPS has a declarative service bundle: 
-- static networking
-- nginx with ACME and only 3 ports exposed
+- netty exposes 3 tcp ports (22:ssh, 80:http, 443:https)
+- services only listen on 127.0.0.1 (runs behind nginx with ACME)
 - Self hosts Forgejo mirroring to GitHub (git.harivan.sh)
 - Self hosts VaultWarden (vault.harivan.sh)
-- Runs sandbox agent behind a CORS proxy (netty.harivan.sh)
+- Runs sandbox agent behind a CORS proxy (netty.harivan.sh)
\ No newline at end of file