alexpires.me/a13labs.infra
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Update firewall rules for VPN devices and add dev-02 to nginx group in inventory

Browse Source
This commit is contained in:
Alexandre Pires
2026-07-11 19:45:35 -04:00
parent 272ed647cf
commit a4a8554fb6
2 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ansible/host_vars/dev-02.lab.alexpires.me.yml
+3 -3
View File
@@ -191,11 +191,11 @@ nginx_proxy_sites:
# Firewall ports # Firewall ports
ufw_enable: true ufw_enable: true
fw_allowed_ports: fw_allowed_ports:
- { rule: "allow", port: "22", proto: "tcp", from: "10.5.5.5/32" } # SSH (VPN device)
- { rule: "allow", port: "22", proto: "tcp", from: "10.19.4.0/24" } # SSH (local network) - { rule: "allow", port: "22", proto: "tcp", from: "10.19.4.0/24" } # SSH (local network)
- { rule: "allow", port: "443", proto: "tcp", from: "10.19.4.0/24" } # HTTPS (nginx reverse proxy) - { rule: "allow", port: "443", proto: "tcp", from: "10.19.4.0/24" } # HTTPS (nginx reverse proxy)
- { rule: "allow", port: "443", proto: "tcp", from: "10.5.5.5/32" } # HTTPS (VPN device) - { rule: "allow", port: "22", proto: "tcp", from: "10.5.5.0/24" } # SSH (VPN devices)
- { rule: "allow", port: "9090", proto: "tcp", from: "10.19.4.0/24" } # Prometheus node-exporter - { rule: "allow", port: "443", proto: "tcp", from: "10.5.5.0/24" } # HTTPS (VPN devices)
- { rule: "allow", port: "9090", proto: "tcp", from: "10.19.4.0/24" } # Cockpit
linux_dev_station_oh_my_zsh_theme: "agnoster" linux_dev_station_oh_my_zsh_theme: "agnoster"
linux_dev_station_oh_my_zsh_plugins: linux_dev_station_oh_my_zsh_plugins:
inventory/hosts
+3
View File
@@ -25,6 +25,9 @@ dev-02.lab.alexpires.me
vh-01.lab.alexpires.me vh-01.lab.alexpires.me
gpu-01.lab.alexpires.me gpu-01.lab.alexpires.me
[nginx]
dev-02.lab.alexpires.me
[public] [public]
prod-01.alexpires.me prod-01.alexpires.me