foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Move TCP/UDP relays to relay servers

Browse source
This commit is contained in:
Timo Makinen 2021-09-01 18:16:44 +00:00
parent e6a6e32755
commit 3420ab744a
2 changed files with 20 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
playbooks/proxy.yml
View file

@ -11,7 +11,6 @@
roles: roles:
- base - base
- relayd
- ifstated - ifstated
- nginx/server - nginx/server
- role: nginx/site - role: nginx/site

29
roles/relayd/templates/relayd.conf.j2
View file

@ -1,15 +1,26 @@
log state changes
log connection
relay "syslog-int" {
listen on 172.20.20.5 port 6514
forward to log01.home.foo.sh port 6514
}
relay "syslog-ext" {
listen on 37.16.96.150 port 6514
forward to log01.home.foo.sh port 6514
}
{% if inventory_hostname == "proxy01.home.foo.sh" %}
table <ldap_servers> { ldap01.home.foo.sh }
{% else %}
table <ldap_servers> { ldap01.home.foo.sh, ldap02.home.foo.sh } table <ldap_servers> { ldap01.home.foo.sh, ldap02.home.foo.sh }
{% endif %} relay "ldap-int" {
relay "ldap" { listen on 172.20.20.6 port 636
listen on 0.0.0.0 port 636 forward to <ldap_servers> check tls
}
relay "ldap-ext" {
listen on 37.16.96.151 port 636
forward to <ldap_servers> check tls forward to <ldap_servers> check tls
} }
relay "syslog" { relay "ldap01-ext" {
listen on 0.0.0.0 port 6514 listen on 37.16.96.152 port 636
forward to log01.home.foo.sh port 6514 forward to ldap01.home.foo.sh port 636
} }