forked from bitlair/ansible
more nft
This commit is contained in:
parent
aa242b0327
commit
31d38e8f06
3 changed files with 18 additions and 0 deletions
|
@ -3,6 +3,11 @@ monitoring_bootstrap_cert: no
|
|||
acme_san_domains:
|
||||
- ["{{ monitoring_domain }}", monitoring.bitlair.nl]
|
||||
|
||||
nft: true
|
||||
group_nft_input:
|
||||
- "# Allow web-traffic from world"
|
||||
- "tcp dport { http, https } accept"
|
||||
|
||||
prometheus_scrape_configs:
|
||||
- job_name: "node"
|
||||
static_configs:
|
||||
|
|
5
group_vars/services.yaml
Normal file
5
group_vars/services.yaml
Normal file
|
@ -0,0 +1,5 @@
|
|||
---
|
||||
|
||||
nft: true
|
||||
group_nft_input: []
|
||||
# - "udp dport 4000 accept # FIXME, werkt op dit moment toch niet hoor ik van AK
|
|
@ -4,6 +4,14 @@ acme_san_domains:
|
|||
- [ bitair.nl ]
|
||||
- [ ravespace.nl ]
|
||||
|
||||
nft: true
|
||||
|
||||
group_nft_input:
|
||||
- "# Allow web-traffic from world"
|
||||
- "tcp dport { http, https } accept"
|
||||
- "# mqtt from world"
|
||||
- "tcp dport { 1883 } accept"
|
||||
|
||||
nginx_sites:
|
||||
- server_name: "bitlair.nl"
|
||||
server_alias: "wiki.bitlair.nl www.bitlair.nl cyber.bitlair.nl"
|
||||
|
|
Loading…
Add table
Reference in a new issue