Improved AI roles

This commit is contained in:
2025-06-02 22:52:04 +02:00
parent 54f7e5536a
commit 755e14a602
12 changed files with 144 additions and 73 deletions
+7 -1
View File
@@ -31,8 +31,9 @@ sshd_max_auth_tries: 10
# Firewall ports
ufw_enable: true
fw_allowed_ports:
- { rule: "allow", port: "8000", proto: "tcp" }
- { rule: "allow", port: "22", proto: "tcp" }
- { rule: "allow", port: "8000", proto: "tcp" }
- { rule: "allow", port: "8080", proto: "tcp" }
ufw_outgoing_traffic:
- 22 # SSH
@@ -41,6 +42,7 @@ ufw_outgoing_traffic:
- 123 # NTP
- 443 # HTTPS
- 853 # DNS over TLS
- 11434 # Ollama
ufw_default_forward_policy: "ACCEPT"
@@ -73,3 +75,7 @@ unattended_reboot_time: "04:30"
# Duo Security
duo_users: ["*", "!provision"]
duo_api_hostname: api-7cda1654.duosecurity.com
# podman services settings
open_webui_home: "/srv/open-webui"
mcp_home: "/srv/mcp"