From a4a8554fb657594024ba5ebafc5a01c42277fdee Mon Sep 17 00:00:00 2001 From: Alexandre Pires Date: Sat, 11 Jul 2026 19:45:35 -0400 Subject: [PATCH] Update firewall rules for VPN devices and add dev-02 to nginx group in inventory --- ansible/host_vars/dev-02.lab.alexpires.me.yml | 6 +++--- inventory/hosts | 3 +++ 2 files changed, 6 insertions(+), 3 deletions(-) diff --git a/ansible/host_vars/dev-02.lab.alexpires.me.yml b/ansible/host_vars/dev-02.lab.alexpires.me.yml index 224e87f..4b17047 100644 --- a/ansible/host_vars/dev-02.lab.alexpires.me.yml +++ b/ansible/host_vars/dev-02.lab.alexpires.me.yml @@ -191,11 +191,11 @@ nginx_proxy_sites: # Firewall ports ufw_enable: true fw_allowed_ports: - - { rule: "allow", port: "22", proto: "tcp", from: "10.5.5.5/32" } # SSH (VPN device) - { rule: "allow", port: "22", proto: "tcp", from: "10.19.4.0/24" } # SSH (local network) - { rule: "allow", port: "443", proto: "tcp", from: "10.19.4.0/24" } # HTTPS (nginx reverse proxy) - - { rule: "allow", port: "443", proto: "tcp", from: "10.5.5.5/32" } # HTTPS (VPN device) - - { rule: "allow", port: "9090", proto: "tcp", from: "10.19.4.0/24" } # Prometheus node-exporter + - { rule: "allow", port: "22", proto: "tcp", from: "10.5.5.0/24" } # SSH (VPN devices) + - { rule: "allow", port: "443", proto: "tcp", from: "10.5.5.0/24" } # HTTPS (VPN devices) + - { rule: "allow", port: "9090", proto: "tcp", from: "10.19.4.0/24" } # Cockpit linux_dev_station_oh_my_zsh_theme: "agnoster" linux_dev_station_oh_my_zsh_plugins: diff --git a/inventory/hosts b/inventory/hosts index 74cb85b..49d52df 100644 --- a/inventory/hosts +++ b/inventory/hosts @@ -25,6 +25,9 @@ dev-02.lab.alexpires.me vh-01.lab.alexpires.me gpu-01.lab.alexpires.me +[nginx] +dev-02.lab.alexpires.me + [public] prod-01.alexpires.me