nft role + disable iptables when nft enabled

This commit is contained in:
Mark Janssen 2024-07-24 21:32:13 +02:00
parent a74dba4557
commit 848917a72c
Signed by: foobar
GPG key ID: D8674D8FC4F69BD2
17 changed files with 348 additions and 57 deletions

View file

@ -5,3 +5,8 @@ etherpad_domain: pad.bitlair.nl
nginx_sites:
- server_name: "pad.bitlair.nl"
localproxy: "9001"
nft: true
group_nft_input:
- "# Allow web-traffic from world"
- "tcp dport { http, https } accept"