diff --git a/roles/firewall/templates/firewall.j2 b/roles/firewall/templates/firewall.j2 index 616dcd0..1df301a 100644 --- a/roles/firewall/templates/firewall.j2 +++ b/roles/firewall/templates/firewall.j2 @@ -530,11 +530,20 @@ config rule option src_ip '{{ lookup('dig', 'ha.mateu.be') }}' list proto 'tcp' option dest 'lan' - option dest_ip '{{ lookup('dig', 'libreelec.home.arpa') }}' + option dest_ip '{{ lookup('dig', 'libreelec.mateu.be') }}' option dest_port '8080' option target 'ACCEPT' option family 'ipv4' +config rule + option name 'Allow-FORWARD-Home-Assistant-RM4Pro' + option src 'dmz' + option src_ip '{{ lookup('dig', 'ha.mateu.be') }}' + option dest 'iot' + option dest_ip '{{ lookup('dig', 'rm4pro.mateu.be') }}' + option target 'ACCEPT' + option family 'ipv4' + ### IoT Rules ## General Rules # ICMP diff --git a/roles/nsd/templates/zones/mateu.be.zone.j2 b/roles/nsd/templates/zones/mateu.be.zone.j2 index 6b017a6..3b3d6ba 100644 --- a/roles/nsd/templates/zones/mateu.be.zone.j2 +++ b/roles/nsd/templates/zones/mateu.be.zone.j2 @@ -39,7 +39,7 @@ garreg-mach IN A 10.233.212.66 haos.dmz IN A {{ global_public_ip_address }} haos.dmz IN AAAA 2a01:e0a:9bd:2811::51 ha IN A 10.233.212.51 -imprimante IN A 10.233.212.94 +libreelec IN A 10.233.212.91 machinbox IN A {{ global_public_ip_address }} machinbox IN AAAA 2a01:e0a:9bd:2810::1 mailalt IN CNAME altsrv @@ -51,6 +51,7 @@ nsd-master1.ext IN AAAA 2001:41d0:a:54b::1 nsd-master1-v6.ext IN AAAA 2001:41d0:a:54b::1 rb IN A 194.156.203.253 rc IN A 10.233.211.195 +rm4pro IN A 10.233.211.200 serenor.dmz IN A {{ global_public_ip_address }} serenor.dmz IN AAAA 2a01:e0a:9bd:2811::59 {% for proxmox_host in groups['proxmox_all_lxc'] | sort %}