homeserver/group_vars/dns.yml
mg 209f80efa3 ufw: Regeln verschärft (#11)
Docker: allow all weg, dafür einzelne dienste freigeschaltet

smb aus lan

jenkins-webgui aus lan

pihole-webgui aus lan

acng aus LAN

ssh nur aus LAN

Co-authored-by: Michael Grote <38253905+quotengrote@users.noreply.github.com>
Reviewed-on: mg/ansible#11
2020-12-23 17:34:11 +01:00

22 lines
434 B
YAML

---
### oefenweb.ufw
ufw_rules:
- rule: allow
to_port: 22
protocol: tcp
from_ip: 192.168.2.0/24
comment: 'ssh'
- rule: allow
to_port: 80
from_ip: 192.168.2.0/24
comment: 'pihole-webgui'
- rule: allow
to_port: 53
comment: 'pihole-dns'
- rule: allow
to_port: 67
comment: 'pihole-dhcp'
- rule: allow
to_port: 68
comment: 'pihole-dhcp'