forked from infra/ansible
23 lines
959 B
Text
23 lines
959 B
Text
---
|
|
copr_machine_type: keygen
|
|
|
|
copr_hostbase: copr-keygen-dev
|
|
# http + signd dest ports
|
|
custom_rules:
|
|
- '-A INPUT -p tcp -m tcp -s 172.30.2.11 --dport 80 -j ACCEPT'
|
|
- '-A INPUT -p tcp -m tcp -s 172.30.2.11 --dport 5167 -j ACCEPT'
|
|
- '-A INPUT -p tcp -m tcp -s 18.208.10.131 --dport 80 -j ACCEPT'
|
|
- '-A INPUT -p tcp -m tcp -s 18.208.10.131 --dport 5167 -j ACCEPT'
|
|
nft_custom_rules:
|
|
- 'add rule {{nft_table_filter}} INPUT ip saddr 172.30.2.11 tcp dport 80 counter accept'
|
|
- 'add rule {{nft_table_filter}} INPUT ip saddr 172.30.2.11 tcp dport 5167 counter accept'
|
|
- 'add rule {{nft_table_filter}} INPUT ip saddr 18.208.10.131 tcp dport 80 counter accept'
|
|
- 'add rule {{nft_table_filter}} INPUT ip saddr 18.208.10.131 tcp dport 5167 counter accept'
|
|
freezes: false
|
|
tcp_ports: [22,
|
|
# node_exporter/prometheus
|
|
9100,
|
|
]
|
|
services_disabled: false
|
|
|
|
aws_ipv6_addr: "2600:1f18:8ee:ae00:3cbb:7920:d83:e607/128"
|