slfhst/ansible
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

⚡: exclude external webservers from Firewall ACL
All checks were successful
ansible-lint / lint-everything (push) Successful in 1m16s
Details

Browse Source
This commit is contained in:
VC
2025-03-30 09:36:31 +02:00
parent a987839c23
commit 8fa63cddfb
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
roles/firewall/templates/firewall.j2
View File

@@ -189,7 +189,7 @@ config redirect
option target 'DNAT' option target 'DNAT'
# Allow Web traffic IN # Allow Web traffic IN
{% for host in groups['webservers'] | sort %} {% for host in groups['webservers'] | difference(groups['disabled_loadbalanced_webservers']) | sort %}
config rule config rule
option name 'Allow-INPUT-{{ hostvars[host]['ansible_host'] }}-Web' option name 'Allow-INPUT-{{ hostvars[host]['ansible_host'] }}-Web'
option src 'wan' option src 'wan'