bundles/nftables: store rules in dedicated files instead of nftables.conf
This commit is contained in:
parent
1742f51778
commit
0101e0c92d
11 changed files with 77 additions and 102 deletions
|
@ -51,6 +51,11 @@ nodes['htz-cloud.influxdb'] = {
|
|||
},
|
||||
},
|
||||
},
|
||||
#'openssh': {
|
||||
# 'restrict-to': {
|
||||
# 'versatel',
|
||||
# },
|
||||
#},
|
||||
'vm': {
|
||||
'cpu': 1,
|
||||
'ram': 2,
|
||||
|
|
|
@ -181,12 +181,10 @@ nodes['htz-cloud.miniserver'] = {
|
|||
},
|
||||
'nftables': {
|
||||
'rules': {
|
||||
'input': {
|
||||
'sophie-weechat': [
|
||||
'udp dport { 60000-61000 } accept',
|
||||
'tcp dport 9001 accept',
|
||||
],
|
||||
},
|
||||
'50-sophie-weechat': [
|
||||
'inet filter input udp dport { 60000-61000 } accept',
|
||||
'inet filter input tcp dport 9001 accept',
|
||||
],
|
||||
},
|
||||
},
|
||||
'nginx': {
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue