opnxng/vps-set-up-playbook
0
0
Fork 0
Code

Modified ufw role

Browse Source
This commit is contained in:
Opnxng 2024-05-25 14:25:38 +08:00
parent 037fce2d51
commit bb45e86c19
2 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
roles/ufw-opnxng/templates/user.rules.j2
View File

@ -20,6 +20,9 @@
### tuple ### allow tcp {{ ssh_port }} 0.0.0.0/0 any {{ wireguard_mesh_subnet }}/16 in ### tuple ### allow tcp {{ ssh_port }} 0.0.0.0/0 any {{ wireguard_mesh_subnet }}/16 in
-A ufw-user-input -p tcp --dport {{ ssh_port }} -s {{ wireguard_mesh_subnet }}/16 -j ACCEPT -A ufw-user-input -p tcp --dport {{ ssh_port }} -s {{ wireguard_mesh_subnet }}/16 -j ACCEPT
### tuple ### allow tcp 8080 0.0.0.0/0 any {{ oracle_ipv4_cidr_block }}/16 in
-A ufw-user-input -p tcp --dport 8080 -s {{ oracle_ipv4_cidr_block }}/16 -j ACCEPT
### tuple ### allow tcp 8870 0.0.0.0/0 any {{ oracle_ipv4_cidr_block }}/16 in ### tuple ### allow tcp 8870 0.0.0.0/0 any {{ oracle_ipv4_cidr_block }}/16 in
-A ufw-user-input -p tcp --dport 8870 -s {{ oracle_ipv4_cidr_block }}/16 -j ACCEPT -A ufw-user-input -p tcp --dport 8870 -s {{ oracle_ipv4_cidr_block }}/16 -j ACCEPT

4
set-up.yaml
View File

@ -40,10 +40,10 @@
# - timezone # - timezone
# - chrony # - chrony
# - hostname # - hostname
- systemd-resolved # - systemd-resolved
# - sources-list # - sources-list
# - ssh # - ssh
# - ufw-opnxng - ufw-opnxng
# - fail2ban # - fail2ban
# - unattended-upgrades # - unattended-upgrades
# - nfs-opnxng # - nfs-opnxng