bundles/nftables: store rules in dedicated files instead of nftables.conf
All checks were successful
kunsi/bundlewrap/pipeline/pr-main This commit looks good
kunsi/bundlewrap/pipeline/head This commit looks good

This commit is contained in:
Franzi 2021-12-14 14:03:13 +01:00
parent 1742f51778
commit 0101e0c92d
Signed by: kunsi
GPG key ID: 12E3D2136B818350
11 changed files with 77 additions and 102 deletions

View file

@ -51,6 +51,11 @@ nodes['htz-cloud.influxdb'] = {
},
},
},
#'openssh': {
# 'restrict-to': {
# 'versatel',
# },
#},
'vm': {
'cpu': 1,
'ram': 2,

View file

@ -181,12 +181,10 @@ nodes['htz-cloud.miniserver'] = {
},
'nftables': {
'rules': {
'input': {
'sophie-weechat': [
'udp dport { 60000-61000 } accept',
'tcp dport 9001 accept',
],
},
'50-sophie-weechat': [
'inet filter input udp dport { 60000-61000 } accept',
'inet filter input tcp dport 9001 accept',
],
},
},
'nginx': {