foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update changed ip addresses

Browse source
This commit is contained in:
Timo Makinen 2024-11-26 13:03:33 +00:00
parent 2c63423a9a
commit 773dff1aa9
3 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
group_vars/ns.yml
View file

@ -1,6 +1,6 @@
---
firewall_in:
- {proto: tcp, port: 22, from: [172.20.20.0/22, 62.78.229.26/32]}
- {proto: tcp, port: 22, from: [172.20.20.0/22, 212.149.248.65/32]}
- {proto: tcp, port: 53}
- {proto: udp, port: 53}
- {proto: tcp, port: 80}

2
group_vars/shell.yml
View file

@ -9,7 +9,7 @@ firewall_in:
- {proto: tcp, port: 22}
- {proto: tcp, port: 80}
- {proto: tcp, port: 443}
- {proto: tcp, port: 9100, from: [62.78.229.26/32]}
- {proto: tcp, port: 9100, from: [212.149.248.65/32]}
ssh_hostnames:
- shell.foo.sh

2
roles/pf/files/pf.conf.gw_home
View file

@ -43,7 +43,7 @@ antispoof for vio1
pass in quick on $int_if proto tcp from $int_net to self port ssh
pass in quick on $ext_if proto tcp from 37.35.86.64/29 to self port ssh
pass in quick on $ext_if proto tcp from 37.16.96.144/28 to self port ssh
pass in quick on $ext_if proto tcp from 62.78.229.19/32 to self port ssh
pass in quick on $ext_if proto tcp from 89.27.104.10/32 to self port ssh
# node_exporter from internal network
pass in quick on $int_if proto tcp from $int_net to self port 9100