This commit is contained in:
Mark Janssen 2024-07-24 22:10:28 +02:00
parent aa242b0327
commit 31d38e8f06
Signed by: foobar
GPG key ID: D8674D8FC4F69BD2
3 changed files with 18 additions and 0 deletions

View file

@ -3,6 +3,11 @@ monitoring_bootstrap_cert: no
acme_san_domains:
- ["{{ monitoring_domain }}", monitoring.bitlair.nl]
nft: true
group_nft_input:
- "# Allow web-traffic from world"
- "tcp dport { http, https } accept"
prometheus_scrape_configs:
- job_name: "node"
static_configs:

5
group_vars/services.yaml Normal file
View file

@ -0,0 +1,5 @@
---
nft: true
group_nft_input: []
# - "udp dport 4000 accept # FIXME, werkt op dit moment toch niet hoor ik van AK

View file

@ -4,6 +4,14 @@ acme_san_domains:
- [ bitair.nl ]
- [ ravespace.nl ]
nft: true
group_nft_input:
- "# Allow web-traffic from world"
- "tcp dport { http, https } accept"
- "# mqtt from world"
- "tcp dport { 1883 } accept"
nginx_sites:
- server_name: "bitlair.nl"
server_alias: "wiki.bitlair.nl www.bitlair.nl cyber.bitlair.nl"