ansible/group_vars/proxy.yml

52 lines
1.2 KiB
YAML

---
# use bigger disk for os as we have web site data there
dsk_size: 30
network_dns_servers:
- 172.20.20.10
- 172.20.21.7
- 172.20.21.8
network_dns_search:
- foo.sh
network_default_gateway: 37.16.96.145
network_carp_interfaces:
- device: vio0
vhid: 8
ipaddr: 172.20.20.8
netmask: 255.255.252.0
pass: "{{ carp8_pass }}"
advskew: "{{ carp8_advskew }}"
- device: vio0
vhid: 9
ipaddr: 172.20.20.9
netmask: 255.255.252.0
pass: "{{ carp9_pass }}"
advskew: "{{ carp9_advskew }}"
- device: vio1
vhid: 153
ipaddr: 37.16.96.153
netmask: 255.255.255.240
ip6addr: 2a00:4cc1:6:1006:feed:dead:beef:153
ip6netmask: 64
pass: "{{ carp153_pass }}"
advskew: "{{ carp153_advskew }}"
- device: vio1
vhid: 154
ipaddr: 37.16.96.154
netmask: 255.255.255.240
ip6addr: 2a00:4cc1:6:1006:feed:dead:beef:154
ip6netmask: 64
pass: "{{ carp154_pass }}"
advskew: "{{ carp154_advskew }}"
ifstated_config: ifstated-proxy.conf
firewall_raw:
- pass quick proto carp
firewall_in:
- {proto: tcp, port: 22, from: [172.20.20.0/22]}
- {proto: tcp, port: 80}
- {proto: tcp, port: 443}
- {proto: tcp, port: 636}
- {proto: tcp, port: 6514}