stargate-cluster/vm-ansible
stargate-cluster
/
vm-ansible
1
0
Fork 0
Code Pull Requests Releases Activity

add allowed range to ssh
continuous-integration/drone/push Build was killed Details

This commit is contained in:
Torma Kristóf 2023-08-28 09:55:03 +02:00
parent e924d3e33c
commit 85fb26bf52
3 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
group_vars/all.yaml
View File

@ -1,7 +1,7 @@
--- ---
ansible_become: true ansible_become: true
ansible_user: ansible@intra.tormakris.dev ansible_user: ansible@intra.tormakris.dev
webgw_allowedranges: allowedranges:
- 192.168.69.0/24 - 192.168.69.0/24
- 192.168.1.0/24 - 192.168.1.0/24
... ...

3
roles/common/tasks/ufw.yaml
View File

@ -18,5 +18,6 @@
community.general.ufw: community.general.ufw:
rule: allow rule: allow
port: ssh port: ssh
src: 192.168.69.0/24 src: "{{ item }}"
with_items: "{{ allowedranges }}"
... ...

2
roles/webserver/tasks/main.yaml
View File

@ -4,7 +4,7 @@
rule: allow rule: allow
port: https port: https
src: "{{ item }}" src: "{{ item }}"
with_items: "{{ webgw_allowedranges }}" with_items: "{{ allowedranges }}"
- name: "Install Nginx via apt" - name: "Install Nginx via apt"
ansible.builtin.apt: ansible.builtin.apt: