Improved AI roles
This commit is contained in:
@@ -31,8 +31,9 @@ sshd_max_auth_tries: 10
|
||||
# Firewall ports
|
||||
ufw_enable: true
|
||||
fw_allowed_ports:
|
||||
- { rule: "allow", port: "8000", proto: "tcp" }
|
||||
- { rule: "allow", port: "22", proto: "tcp" }
|
||||
- { rule: "allow", port: "8000", proto: "tcp" }
|
||||
- { rule: "allow", port: "8080", proto: "tcp" }
|
||||
|
||||
ufw_outgoing_traffic:
|
||||
- 22 # SSH
|
||||
@@ -41,6 +42,7 @@ ufw_outgoing_traffic:
|
||||
- 123 # NTP
|
||||
- 443 # HTTPS
|
||||
- 853 # DNS over TLS
|
||||
- 11434 # Ollama
|
||||
|
||||
ufw_default_forward_policy: "ACCEPT"
|
||||
|
||||
@@ -73,3 +75,7 @@ unattended_reboot_time: "04:30"
|
||||
# Duo Security
|
||||
duo_users: ["*", "!provision"]
|
||||
duo_api_hostname: api-7cda1654.duosecurity.com
|
||||
|
||||
# podman services settings
|
||||
open_webui_home: "/srv/open-webui"
|
||||
mcp_home: "/srv/mcp"
|
||||
|
||||
@@ -35,7 +35,6 @@ packages_blocklist: []
|
||||
ufw_enable: true
|
||||
fw_allowed_ports:
|
||||
- { rule: "allow", port: "22", proto: "tcp" }
|
||||
- { rule: "allow", port: "8080", proto: "tcp" }
|
||||
- { rule: "allow", port: "11434", proto: "tcp" }
|
||||
|
||||
ufw_outgoing_traffic:
|
||||
@@ -45,7 +44,6 @@ ufw_outgoing_traffic:
|
||||
- 123 # NTP
|
||||
- 443 # HTTPS
|
||||
- 853 # DNS over TLS
|
||||
- 8000
|
||||
|
||||
ufw_default_forward_policy: "ACCEPT"
|
||||
|
||||
@@ -71,8 +69,6 @@ unattended_reboot_time: "04:30"
|
||||
duo_users: ["*", "!provision"]
|
||||
duo_api_hostname: api-7cda1654.duosecurity.com
|
||||
|
||||
# open_web_ui settings
|
||||
open_webui_home: "/mnt/data/ai"
|
||||
open_webui_network_name: "ai-network"
|
||||
open_webui_user: "ai"
|
||||
open_webui_group: "ai"
|
||||
# podman services settings
|
||||
ollama_home: "/mnt/data/ollama"
|
||||
kokora_home: "/mnt/data/kokoro"
|
||||
|
||||
Reference in New Issue
Block a user