⚡: exclude external webservers from Firewall ACL

2025-03-30 09:36:31 +02:00
parent a987839c23
commit 8fa63cddfb
1 changed files with 1 additions and 1 deletions
--- a/roles/firewall/templates/firewall.j2
+++ b/roles/firewall/templates/firewall.j2
@@ -189,7 +189,7 @@ config redirect
 	option target 'DNAT'

 # Allow Web traffic IN
-{% for host in groups['webservers'] | sort %}
+{% for host in groups['webservers'] | difference(groups['disabled_loadbalanced_webservers']) | sort %}
 config rule
 	option name 'Allow-INPUT-{{ hostvars[host]['ansible_host'] }}-Web'
 	option src 'wan'