From 6fa5b18c964d95d27b6ce737ac6068fc1cf99a8f Mon Sep 17 00:00:00 2001
From: Timo Makinen <tmakinen@foo.sh>
Date: Wed, 18 Jun 2025 16:11:12 +0000
Subject: [PATCH] Don't hardcode DNA ip addresses

---
 group_vars/ns.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/group_vars/ns.yml b/group_vars/ns.yml
index 2a284b1..0d25c16 100644
--- a/group_vars/ns.yml
+++ b/group_vars/ns.yml
@@ -1,6 +1,6 @@
 ---
 firewall_in:
-  - {proto: tcp, port: 22, from: [172.20.20.0/22, 212.149.225.204/32]}
+  - {proto: tcp, port: 22, from: [172.20.20.0/22, "{{ gw_home_ip }}/32"]}
   - {proto: tcp, port: 53}
   - {proto: udp, port: 53}
   - {proto: tcp, port: 80}