forked from infra/ansible
23 lines
940 B
Text
23 lines
940 B
Text
---
|
|
copr_machine_type: keygen
|
|
|
|
copr_hostbase: copr-keygen
|
|
# http + signd dest ports
|
|
custom_rules:
|
|
- '-A INPUT -p tcp -m tcp -s 52.44.175.77 --dport 80 -j ACCEPT'
|
|
- '-A INPUT -p tcp -m tcp -s 52.44.175.77 --dport 5167 -j ACCEPT'
|
|
- '-A INPUT -p tcp -m tcp -s 172.30.2.105 --dport 80 -j ACCEPT'
|
|
- '-A INPUT -p tcp -m tcp -s 172.30.2.105 --dport 5167 -j ACCEPT'
|
|
nft_custom_rules:
|
|
- 'add rule {{nft_table_filter}} INPUT ip saddr 52.44.175.77 tcp dport 80 counter accept'
|
|
- 'add rule {{nft_table_filter}} INPUT ip saddr 52.44.175.77 tcp dport 5167 counter accept'
|
|
- 'add rule {{nft_table_filter}} INPUT ip saddr 172.30.2.105 tcp dport 80 counter accept'
|
|
- 'add rule {{nft_table_filter}} INPUT ip saddr 172.30.2.105 tcp dport 5167 counter accept'
|
|
freezes: false
|
|
tcp_ports: [22,
|
|
# node_exporter/prometheus
|
|
9100,
|
|
]
|
|
services_disabled: false
|
|
|
|
aws_ipv6_addr: "2600:1f18:8ee:ae00:acef:63f0:530a:cdff/128"
|