♿: make hypervisor accessible online

2025-03-20 17:57:09 +01:00
parent 000cafc4a7
commit 064c28f0a7
1 changed files with 11 additions and 0 deletions
--- a/roles/firewall/templates/firewall.j2
+++ b/roles/firewall/templates/firewall.j2
@@ -260,6 +260,17 @@ config rule

 {% endfor %}

+{% set first_hypervisor = hostvars[groups['hypervisors'][0]] %}
+config redirect
+	option name 'Allow-INPUT-ProxmoxVE-Admin'
+	option src 'wan'
+	option src_dport '8006'
+	list proto 'tcp'
+	option dest 'dmz'
+	option dest_ip '{{ first_hypervisor['ansible_default_ipv4']['address'] }}'
+	option dest_port '8006'
+	option target 'DNAT'
+
 # Allow XMPP traffic
 config rule
 	option name 'Allow-OUTPUT-XMPP-s2s'