forked from infra/ansible
refactor: delete fasjson_aliases variable and checks
This commit is contained in:
parent
c5c1fb730f
commit
276556a4fb
3 changed files with 0 additions and 15 deletions
|
|
@ -14,14 +14,6 @@ nft_block_rules:
|
|||
# This host is externally reachable
|
||||
#
|
||||
external: true
|
||||
#
|
||||
# Set this to get fasclient cron to make the aliases file
|
||||
#
|
||||
fas_aliases: false
|
||||
#
|
||||
# Set this to get fasjson-client cron to make the aliases file
|
||||
#
|
||||
fasjson_aliases: true
|
||||
fasjson_url: https://fasjson.fedoraproject.org/
|
||||
host_group: bastion
|
||||
ipa_client_shell_groups:
|
||||
|
|
|
|||
|
|
@ -21,10 +21,6 @@ custom_rules: ['-A INPUT -s 192.168.100/24 -j REJECT --reject-with icmp-host-pro
|
|||
nft_block_rules:
|
||||
- 'add rule ip filter INPUT ip saddr 192.168.100.0/24 counter reject with icmp type host-prohibited'
|
||||
- 'add rule ip filter INPUT ip saddr 10.0.0.0/8 udp dport 123 counter accept'
|
||||
#
|
||||
# Set this to get fasjson-client cron to make the aliases file
|
||||
#
|
||||
fasjson_aliases: true
|
||||
ipa_client_shell_groups: "{{ (bastion_ipa_client_shell_groups + batcave_ipa_client_shell_groups) | sort | unique }}"
|
||||
#
|
||||
# allow a bunch of sysadmin groups here so they can access internal stuff
|
||||
|
|
|
|||
|
|
@ -18,18 +18,15 @@
|
|||
tags:
|
||||
- config
|
||||
- fasjson
|
||||
when: fasjson_aliases is defined
|
||||
|
||||
- name: Fasjson-aliases cron job
|
||||
ansible.builtin.copy: src=fasjson-aliases.cron dest=/etc/cron.d/fasjson-aliases owner=root mode=0644
|
||||
tags:
|
||||
- config
|
||||
- fasjson
|
||||
when: fasjson_aliases is defined
|
||||
|
||||
- name: Fasjson-aliases base static file
|
||||
ansible.builtin.copy: src=aliases.static dest=/etc/aliases.static owner=root mode=0644
|
||||
tags:
|
||||
- config
|
||||
- fasjson
|
||||
when: fasjson_aliases is defined
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue