alexpires.me/a13labs.infra
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Add mail playbook and update firewall rules for mail services

Browse Source
This commit is contained in:
Alexandre Pires
2025-03-15 22:49:13 +01:00
parent 7c5f6c5f0f
commit afe0a1010d
3 changed files with 52 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ansible/host_vars/prod-01.alexpires.me.yml
+4 -1
View File
@@ -39,6 +39,8 @@ fw_allowed_ports:
- { rule: "allow", port: "80", proto: "tcp" }
- { rule: "allow", port: "443", proto: "tcp" }
- { rule: "allow", port: "22", proto: "tcp" }
- { rule: "allow", port: "993", proto: "tcp" }
- { rule: "allow", port: "465", proto: "tcp" }
- { rule: "allow", port: "21115", proto: "tcp" }
- { rule: "allow", port: "21116", proto: "tcp" }
- { rule: "allow", port: "21116", proto: "udp" }
@@ -46,7 +48,7 @@ fw_allowed_ports:
- { rule: "allow", port: "16443", proto: "tcp", from: "10.1.0.0/16" }
- { rule: "allow", port: "10254", proto: "tcp", from: "10.1.0.0/16" }
# Access to the Kube API Server from the Office
- { rule: "allow", port: "16443", proto: "tcp", from: "84.195.60.15" }
- { rule: "allow", port: "16443", proto: "tcp", from: "188.82.170.183" }
# VPN to Portugal
- { rule: "allow", port: "10254", proto: "tcp", from: "147.78.131.194" }
@@ -61,6 +63,7 @@ ufw_outgoing_traffic:
- 16443 # Kube API Server
- 4443
- 9443
- 995 # POP3S
ufw_default_forward_policy: "ACCEPT"