mg/homeserver
1
0
Fork 0
Code Issues 1 Pull requests 3 Activity Actions

fw

Browse source
This commit is contained in:
Michael Grote 2024-09-23 21:17:36 +02:00
parent 36f8b031fd
commit 2d6b53bc06
7 changed files with 36 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
group_vars/all.yml
View file

@ -96,6 +96,11 @@ ufw_rules:
protocol: tcp protocol: tcp
comment: 'munin' comment: 'munin'
from_ip: 192.168.2.0/24 from_ip: 192.168.2.0/24
- rule: allow
to_port: 9080
protocol: tcp
comment: 'promtail'
from_ip: 192.168.2.0/24
ufw_default_incoming_policy: deny ufw_default_incoming_policy: deny
ufw_default_outgoing_policy: allow ufw_default_outgoing_policy: allow

5
group_vars/blocky.yml
View file

@ -14,6 +14,11 @@ ufw_rules:
protocol: tcp protocol: tcp
comment: 'munin' comment: 'munin'
from_ip: 192.168.2.0/24 from_ip: 192.168.2.0/24
- rule: allow
to_port: 9080
protocol: tcp
comment: 'promtail'
from_ip: 192.168.2.0/24
- rule: allow - rule: allow
to_port: 53 to_port: 53
comment: 'dns' comment: 'dns'

5
group_vars/docker.yml
View file

@ -140,6 +140,11 @@ ufw_rules:
protocol: tcp protocol: tcp
comment: 'munin' comment: 'munin'
from_ip: 192.168.2.0/24 from_ip: 192.168.2.0/24
- rule: allow
to_port: 9080
protocol: tcp
comment: 'promtail'
from_ip: 192.168.2.0/24
- rule: allow - rule: allow
from_ip: 192.168.0.0/16 from_ip: 192.168.0.0/16
comment: 'docker networks' comment: 'docker networks'

5
group_vars/fileserver.yml
View file

@ -14,6 +14,11 @@ ufw_rules:
protocol: tcp protocol: tcp
comment: 'munin' comment: 'munin'
from_ip: 192.168.2.0/24 from_ip: 192.168.2.0/24
- rule: allow
to_port: 9080
protocol: tcp
comment: 'promtail'
from_ip: 192.168.2.0/24
- rule: allow - rule: allow
to_port: 445 to_port: 445
comment: 'smb' comment: 'smb'

5
group_vars/git.yml
View file

@ -41,6 +41,11 @@ ufw_rules:
protocol: tcp protocol: tcp
comment: 'munin' comment: 'munin'
from_ip: 192.168.2.0/24 from_ip: 192.168.2.0/24
- rule: allow
to_port: 9080
protocol: tcp
comment: 'promtail'
from_ip: 192.168.2.0/24
- rule: allow - rule: allow
to_port: "{{ gitea_http_port }}" to_port: "{{ gitea_http_port }}"
protocol: tcp protocol: tcp

5
group_vars/ldap.yml
View file

@ -18,6 +18,11 @@ ufw_rules:
protocol: tcp protocol: tcp
comment: 'munin' comment: 'munin'
from_ip: 192.168.2.0/24 from_ip: 192.168.2.0/24
- rule: allow
to_port: 9080
protocol: tcp
comment: 'promtail'
from_ip: 192.168.2.0/24
- rule: allow - rule: allow
to_port: "{{ lldap_http_port }}" to_port: "{{ lldap_http_port }}"
protocol: tcp protocol: tcp

8
group_vars/munin.yml
View file

@ -7,10 +7,14 @@ ufw_rules:
comment: 'ssh' comment: 'ssh'
from_ip: 0.0.0.0/0 from_ip: 0.0.0.0/0
- rule: allow - rule: allow
to_port: 80 #TODO passt? to_port: 80
protocol: tcp protocol: tcp
comment: 'munin' comment: 'munin'
- rule: allow
to_port: 9080
protocol: tcp
comment: 'promtail'
from_ip: 192.168.2.0/24
### mgrote_restic ### mgrote_restic
restic_folders_to_backup: "/usr/local /etc /root /home /var/lib/munin" restic_folders_to_backup: "/usr/local /etc /root /home /var/lib/munin"