BlackDragon/ansible
1
0
Fork 0
forked from bitlair/ansible
Code Pull requests Activity

nft role + disable iptables when nft enabled

Browse source
This commit is contained in:
Mark Janssen 2024-07-24 21:32:13 +02:00
parent a74dba4557
commit 848917a72c
Signed by: foobar
GPG key ID: D8674D8FC4F69BD2
17 changed files with 348 additions and 57 deletions
Download patch file Download diff file Expand all files Collapse all files

35
group_vars/all.yaml
View file

@ -5,26 +5,21 @@ ansible_python_interpreter: auto_silent
notify_email: bestuur@bitlair.nl
acme_bootstrap_certs: no
trusted_ranges:
# localhost
- { v: ipv4, cidr: "127.0.0.1/8" }
- { v: ipv6, cidr: "::1" }
# rf1928
- { v: ipv4, cidr: "10.0.0.0/8" }
- { v: ipv4, cidr: "172.16.0.0/12" }
- { v: ipv4, cidr: "192.168.0.0/16" }
# v6 local
- { v: ipv6, cidr: "fe80::/10" }
# vihamij
- { v: ipv4, cidr: "45.88.49.140" }
# eventinfra
- { v: ipv4, cidr: "204.2.64.0/20" }
# bitlair
- { v: ipv4, cidr: "100.64.0.0/10" }
- { v: ipv4, cidr: "185.205.52.194/32" }
- { v: ipv6, cidr: "2a02:166b:92::/48" }
# foobar
- { v: ipv4, cidr: "31.187.251.213/32" }
- { v: ipv6, cidr: "2a0e:5700:4:2::/64" }
- { v: ipv4, cidr: "127.0.0.1/8", comment: "localhost" }
- { v: ipv4, cidr: "10.0.0.0/8", comment: "rfc1918" }
- { v: ipv4, cidr: "172.16.0.0/12", comment: "rfc1918" }
- { v: ipv4, cidr: "192.168.0.0/16", comment: "rfc1918" }
- { v: ipv4, cidr: "45.88.49.140", comment: "vihamij" }
- { v: ipv4, cidr: "204.2.64.0/20", comment: "eventinfra" }
- { v: ipv4, cidr: "100.64.0.0/10", comment: "bitlair" }
- { v: ipv4, cidr: "185.205.52.194/32", comment: "bitlair" }
- { v: ipv4, cidr: "31.187.251.213/32", comment: "foobar" }
# - { v: ipv6, cidr: "::/0", comment: "ipv6 localhost" }
# - { v: ipv6, cidr: "fe80::/10", comment: "ipv6 link-local" }
# - { v: ipv6, cidr: "2a02:166b:92::/48", comment: "bitlair" } # /48's kunnen niet in de ipset
- { v: ipv6, cidr: "2001:678:814:68::/64", comment: "bitlair wifi" }
- { v: ipv6, cidr: "2a05:2d01:0:4042::/64", comment: "bitlair servers" }
- { v: ipv6, cidr: "2a0e:5700:4:2::/64", comment: "foobar" }
root_access:
- ak