mg/homeserver
1
0
Fork 0
Code Issues 1 Pull requests 3 Activity Actions

Firewallregeln verschärft

Browse source
This commit is contained in:
Michael Grote 2020-12-31 14:39:17 +01:00
parent 1fc7975323
commit 66c9174131
8 changed files with 20 additions and 13 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
group_vars/acng.yml
View file

@ -5,6 +5,7 @@
to_port: 22 to_port: 22
protocol: tcp protocol: tcp
comment: 'ssh' comment: 'ssh'
from_ip: 192.168.2.0/24
- rule: allow - rule: allow
to_port: 9999 to_port: 9999
from_ip: 192.168.2.0/24 from_ip: 192.168.2.0/24

1
group_vars/all.yml
View file

@ -42,6 +42,7 @@
to_port: 22 to_port: 22
protocol: tcp protocol: tcp
comment: 'ssh' comment: 'ssh'
from_ip: 192.168.2.0/24
### ryandaniels.create_users ### ryandaniels.create_users
users: users:
- username: mg - username: mg

2
group_vars/dns.yml
View file

@ -5,9 +5,11 @@
to_port: 22 to_port: 22
protocol: tcp protocol: tcp
comment: 'ssh' comment: 'ssh'
from_ip: 192.168.2.0/24
- rule: allow - rule: allow
to_port: 80 to_port: 80
comment: 'pihole-webgui' comment: 'pihole-webgui'
from_ip: 192.168.2.0/24
- rule: allow - rule: allow
to_port: 53 to_port: 53
comment: 'pihole-dns' comment: 'pihole-dns'

6
group_vars/docker.yml
View file

@ -5,21 +5,27 @@
to_port: 22 to_port: 22
protocol: tcp protocol: tcp
comment: 'ssh' comment: 'ssh'
from_ip: 192.168.2.0/24
- rule: allow - rule: allow
to_port: 80 to_port: 80
comment: 'docker-traefik' comment: 'docker-traefik'
from_ip: 192.168.2.0/24
- rule: allow - rule: allow
to_port: 443 to_port: 443
comment: 'docker-traefik' comment: 'docker-traefik'
from_ip: 192.168.2.0/24
- rule: allow - rule: allow
to_port: 8080 to_port: 8080
comment: 'docker-traefik' comment: 'docker-traefik'
from_ip: 192.168.2.0/24
- rule: allow - rule: allow
to_port: 333 to_port: 333
comment: 'docker-homer' comment: 'docker-homer'
from_ip: 192.168.2.0/24
- rule: allow - rule: allow
to_port: 3001 to_port: 3001
comment: 'docker-rssbridge' comment: 'docker-rssbridge'
from_ip: 192.168.2.0/24
# - rule: allow # - rule: allow
# comment: 'alles erlauben' # comment: 'alles erlauben'
### geerlingguy.docker ### geerlingguy.docker

2
group_vars/dokuwiki.yml
View file

@ -7,6 +7,8 @@
to_port: 22 to_port: 22
protocol: tcp protocol: tcp
comment: 'ssh' comment: 'ssh'
from_ip: 192.168.2.0/24
- rule: allow - rule: allow
to_port: 80 to_port: 80
comment: 'dokuwiki-webserver' comment: 'dokuwiki-webserver'
from_ip: 192.168.2.0/24

3
group_vars/gitea.yml
View file

@ -7,14 +7,17 @@
to_port: 22 to_port: 22
protocol: tcp protocol: tcp
comment: 'ssh' comment: 'ssh'
from_ip: 192.168.2.0/24
- rule: allow - rule: allow
to_port: 3000 to_port: 3000
protocol: tcp protocol: tcp
comment: 'gitea' comment: 'gitea'
from_ip: 192.168.2.0/24
- rule: allow - rule: allow
to_port: 2222 to_port: 2222
protocol: tcp protocol: tcp
comment: 'gitea' comment: 'gitea'
from_ip: 192.168.2.0/24
### tmaurice.gitea ### tmaurice.gitea
gitea_version: "1.13.0" gitea_version: "1.13.0"
gitea_app_name: "Gitea" gitea_app_name: "Gitea"

2
group_vars/jenkins.yml
View file

@ -22,9 +22,11 @@
to_port: 22 to_port: 22
protocol: tcp protocol: tcp
comment: 'ssh' comment: 'ssh'
from_ip: 192.168.2.0/24
- rule: allow - rule: allow
to_port: 8080 to_port: 8080
comment: 'jenkins' comment: 'jenkins'
from_ip: 192.168.2.0/24
### mgrote.restic ### mgrote.restic
restic_folders_to_backup: /usr/local /etc /root /home /var/lib/jenkins restic_folders_to_backup: /usr/local /etc /root /home /var/lib/jenkins
### mgrote.install_packages ### mgrote.install_packages

16
group_vars/storage.yml
View file

@ -73,22 +73,12 @@
to_port: 22 to_port: 22
protocol: tcp protocol: tcp
comment: 'ssh' comment: 'ssh'
from_ip: 192.168.2.0/24
- rule: allow - rule: allow
to_port: 445 to_port: 445
comment: 'smb' comment: 'smb'
from_ip: 192.168.2.0/24
- rule: allow - rule: allow
to_port: 139 to_port: 139
comment: 'smb' comment: 'smb'
- rule: allow from_ip: 192.168.2.0/24
to_port: 9000:9010
protocol: tcp
comment: 'minio'
### atosatto.minio
minio_user: minio
minio_group: minio
minio_server_addr: ":9000"
minio_server_datadirs:
- /shares/minio
minio_server_make_datadirs: true
minio_access_key: "{{ lookup('keepass', 'minio_access_key', 'password') }}"
minio_secret_key: "{{ lookup('keepass', 'minio_secret_key', 'password') }}"