1
0
Fork 0
forked from infra/ansible

refactor: delete fasjson_aliases variable and checks

This commit is contained in:
Ruilai Ma 2026-03-23 23:45:27 +01:00 committed by Kevin Fenzi
commit 276556a4fb
3 changed files with 0 additions and 15 deletions

View file

@ -14,14 +14,6 @@ nft_block_rules:
# This host is externally reachable
#
external: true
#
# Set this to get fasclient cron to make the aliases file
#
fas_aliases: false
#
# Set this to get fasjson-client cron to make the aliases file
#
fasjson_aliases: true
fasjson_url: https://fasjson.fedoraproject.org/
host_group: bastion
ipa_client_shell_groups:

View file

@ -21,10 +21,6 @@ custom_rules: ['-A INPUT -s 192.168.100/24 -j REJECT --reject-with icmp-host-pro
nft_block_rules:
- 'add rule ip filter INPUT ip saddr 192.168.100.0/24 counter reject with icmp type host-prohibited'
- 'add rule ip filter INPUT ip saddr 10.0.0.0/8 udp dport 123 counter accept'
#
# Set this to get fasjson-client cron to make the aliases file
#
fasjson_aliases: true
ipa_client_shell_groups: "{{ (bastion_ipa_client_shell_groups + batcave_ipa_client_shell_groups) | sort | unique }}"
#
# allow a bunch of sysadmin groups here so they can access internal stuff

View file

@ -18,18 +18,15 @@
tags:
- config
- fasjson
when: fasjson_aliases is defined
- name: Fasjson-aliases cron job
ansible.builtin.copy: src=fasjson-aliases.cron dest=/etc/cron.d/fasjson-aliases owner=root mode=0644
tags:
- config
- fasjson
when: fasjson_aliases is defined
- name: Fasjson-aliases base static file
ansible.builtin.copy: src=aliases.static dest=/etc/aliases.static owner=root mode=0644
tags:
- config
- fasjson
when: fasjson_aliases is defined