From 20d91ff1b001260b136758a6ea0ac5eadb55f170 Mon Sep 17 00:00:00 2001
From: Timo Makinen <tmakinen@foo.sh>
Date: Thu, 6 Jun 2024 19:30:05 +0000
Subject: [PATCH] Add blackbox_exporter to external ns host

---
 group_vars/ns.yml | 3 ++-
 playbooks/ns.yml  | 2 ++
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/group_vars/ns.yml b/group_vars/ns.yml
index 544cf9b..79a23ca 100644
--- a/group_vars/ns.yml
+++ b/group_vars/ns.yml
@@ -6,7 +6,8 @@ firewall_in:
   - {proto: tcp, port: 80}
   - {proto: tcp, port: 443}
   - {proto: tcp, port: 853}
-  - {proto: tcp, port: 9100, from: [172.20.20.0/22, 62.78.229.29/32]}
+  - {proto: tcp, port: 9100}
+  - {proto: tcp, port: 9115}
 firewall_raw:
   - pass quick proto carp
 
diff --git a/playbooks/ns.yml b/playbooks/ns.yml
index a7476ca..b4e6dbf 100644
--- a/playbooks/ns.yml
+++ b/playbooks/ns.yml
@@ -21,3 +21,5 @@
       nginx_site_redirect: https://www.foo.sh/
     - role: ifstated
       when: "'vultr' not in group_names"
+    - role: blackbox_exporter
+      when: "inventory_hostname == 'atl01.vultr.foo.sh'"