mg/homeserver
1
0
Fork 0
Code Issues 1 Pull requests 3 Activity Actions

Firewallregeln verschärft

Browse source
This commit is contained in:
Michael Grote 2020-12-31 14:39:17 +01:00
parent 1fc7975323
commit 66c9174131
8 changed files with 20 additions and 13 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
group_vars/acng.yml
View file

@ -5,6 +5,7 @@
to_port: 22
protocol: tcp
comment: 'ssh'
from_ip: 192.168.2.0/24
- rule: allow
to_port: 9999
from_ip: 192.168.2.0/24

1
group_vars/all.yml
View file

@ -42,6 +42,7 @@
to_port: 22
protocol: tcp
comment: 'ssh'
from_ip: 192.168.2.0/24
### ryandaniels.create_users
users:
- username: mg

2
group_vars/dns.yml
View file

@ -5,9 +5,11 @@
to_port: 22
protocol: tcp
comment: 'ssh'
from_ip: 192.168.2.0/24
- rule: allow
to_port: 80
comment: 'pihole-webgui'
from_ip: 192.168.2.0/24
- rule: allow
to_port: 53
comment: 'pihole-dns'

6
group_vars/docker.yml
View file

@ -5,21 +5,27 @@
to_port: 22
protocol: tcp
comment: 'ssh'
from_ip: 192.168.2.0/24
- rule: allow
to_port: 80
comment: 'docker-traefik'
from_ip: 192.168.2.0/24
- rule: allow
to_port: 443
comment: 'docker-traefik'
from_ip: 192.168.2.0/24
- rule: allow
to_port: 8080
comment: 'docker-traefik'
from_ip: 192.168.2.0/24
- rule: allow
to_port: 333
comment: 'docker-homer'
from_ip: 192.168.2.0/24
- rule: allow
to_port: 3001
comment: 'docker-rssbridge'
from_ip: 192.168.2.0/24
# - rule: allow
# comment: 'alles erlauben'
### geerlingguy.docker

2
group_vars/dokuwiki.yml
View file

@ -7,6 +7,8 @@
to_port: 22
protocol: tcp
comment: 'ssh'
from_ip: 192.168.2.0/24
- rule: allow
to_port: 80
comment: 'dokuwiki-webserver'
from_ip: 192.168.2.0/24

3
group_vars/gitea.yml
View file

@ -7,14 +7,17 @@
to_port: 22
protocol: tcp
comment: 'ssh'
from_ip: 192.168.2.0/24
- rule: allow
to_port: 3000
protocol: tcp
comment: 'gitea'
from_ip: 192.168.2.0/24
- rule: allow
to_port: 2222
protocol: tcp
comment: 'gitea'
from_ip: 192.168.2.0/24
### tmaurice.gitea
gitea_version: "1.13.0"
gitea_app_name: "Gitea"

2
group_vars/jenkins.yml
View file

@ -22,9 +22,11 @@
to_port: 22
protocol: tcp
comment: 'ssh'
from_ip: 192.168.2.0/24
- rule: allow
to_port: 8080
comment: 'jenkins'
from_ip: 192.168.2.0/24
### mgrote.restic
restic_folders_to_backup: /usr/local /etc /root /home /var/lib/jenkins
### mgrote.install_packages

16
group_vars/storage.yml
View file

@ -73,22 +73,12 @@
to_port: 22
protocol: tcp
comment: 'ssh'
from_ip: 192.168.2.0/24
- rule: allow
to_port: 445
comment: 'smb'
from_ip: 192.168.2.0/24
- rule: allow
to_port: 139
comment: 'smb'
- rule: allow
to_port: 9000:9010
protocol: tcp
comment: 'minio'
### atosatto.minio
minio_user: minio
minio_group: minio
minio_server_addr: ":9000"
minio_server_datadirs:
- /shares/minio
minio_server_make_datadirs: true
minio_access_key: "{{ lookup('keepass', 'minio_access_key', 'password') }}"
minio_secret_key: "{{ lookup('keepass', 'minio_secret_key', 'password') }}"
from_ip: 192.168.2.0/24