mg
87c8fe145d
pihole: ufw: dns-ports entfernt Co-authored-by: Michael Grote <michael.grote@posteo.de> Reviewed-on: mg/ansible#144 Co-Authored-By: mg <mg@noreply.git.mgrote.net> Co-Committed-By: mg <mg@noreply.git.mgrote.net>
32 lines
967 B
YAML
32 lines
967 B
YAML
---
|
|
### oefenweb.ufw
|
|
ufw_rules:
|
|
- rule: allow
|
|
to_port: 22
|
|
protocol: tcp
|
|
comment: 'ssh'
|
|
from_ip: 192.168.2.0/24
|
|
- rule: allow
|
|
to_port: 80
|
|
comment: 'pihole-webgui'
|
|
from_ip: 192.168.2.0/24
|
|
- rule: allow
|
|
to_port: 4949
|
|
protocol: tcp
|
|
comment: 'munin'
|
|
from_ip: 192.168.2.144/24
|
|
- rule: allow
|
|
to_port: 53
|
|
comment: 'pihole-dns'
|
|
## playbook
|
|
pihole_homer_fqdn: docker.grote.lan # unter welchem host ist docker erreichbar? notwendig für die pihole stats in homer; fur die cors abfrage
|
|
### mgrote.restic
|
|
restic_repository: "//192.168.2.36/backup/restic" # weil pihole den fqdn nicht auflösen kann
|
|
### mgrote.ntp_chrony_server
|
|
ntp_chrony_servers: # weil pihole den fqdn nicht auflösen kann
|
|
- address: pool.ntp.org
|
|
options: iburst #optionaler parameter
|
|
### mgrote.apt_manage_sources
|
|
manage_sources_apt_proxy_server: ""
|
|
manage_sources_apt_proxy_port: ""
|