bitlair/ansible
6
0
Fork 1
Code Issues Pull requests Activity Actions

Make trusted_ports list

Browse source
This commit is contained in:
Mark Janssen 2024-07-25 10:53:44 +02:00
parent 631e09ff74
commit 35a63d7aaa
Signed by: foobar
GPG key ID: D8674D8FC4F69BD2
4 changed files with 11 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

4
roles/nft/templates/nftables.conf.j2
View file

@ -73,8 +73,8 @@ set trusted6 {
} accept
# Open ssh only for trusted machines
ip saddr @trusted4 tcp dport { ssh } accept
ip6 saddr @trusted6 tcp dport { ssh } accept
ip saddr @trusted4 tcp dport { {{ trusted_ports|join(', ') }} } accept
ip6 saddr @trusted6 tcp dport { {{ trusted_ports|join(', ') }} } accept
# Rules based on group-vars
{% for custom in nft_group_rules %}