bundles: use a common metadata key for firewall restrictions, use repo.libs.tools.resolve_identifier()
All checks were successful
bundlewrap/pipeline/head This commit looks good
All checks were successful
bundlewrap/pipeline/head This commit looks good
This commit is contained in:
parent
9a2f9038c4
commit
5c1eba0d58
8 changed files with 92 additions and 49 deletions
|
@ -31,8 +31,8 @@ nodes['home.downloadhelper'] = {
|
|||
'exclude_from_backups': True,
|
||||
},
|
||||
'netdata': {
|
||||
'restrict-to-interfaces': {
|
||||
'enp1s0.42',
|
||||
'restrict-to': {
|
||||
'172.19.136.0/22',
|
||||
},
|
||||
},
|
||||
'nfs-client': {
|
||||
|
@ -52,8 +52,8 @@ nodes['home.downloadhelper'] = {
|
|||
'download-dir': '/mnt/nas',
|
||||
'download-queue-size': 10,
|
||||
},
|
||||
'webinterface-on-interfaces': {
|
||||
'enp1s0.42',
|
||||
'restrict-to': {
|
||||
'172.19.136.0/22',
|
||||
},
|
||||
},
|
||||
},
|
||||
|
|
|
@ -82,16 +82,14 @@ nodes['home.router'] = {
|
|||
],
|
||||
},
|
||||
'netdata': {
|
||||
'restrict-to-interfaces': {
|
||||
'enp1s0.42',
|
||||
'wg0',
|
||||
'restrict-to': {
|
||||
'172.19.136.0/22',
|
||||
},
|
||||
},
|
||||
'nginx': {
|
||||
'use_ssl_for_all_connections': False,
|
||||
'restrict-to-interfaces': {
|
||||
'enp1s0.42',
|
||||
'wg0',
|
||||
'restrict-to': {
|
||||
'172.19.136.0/22',
|
||||
},
|
||||
},
|
||||
'openvpn-client': {
|
||||
|
@ -115,9 +113,8 @@ nodes['home.router'] = {
|
|||
},
|
||||
},
|
||||
'unbound': {
|
||||
'restrict-to-interfaces': {
|
||||
'enp1s0.23',
|
||||
'enp1s0.42',
|
||||
'restrict-to': {
|
||||
'172.19.138.0/23',
|
||||
},
|
||||
},
|
||||
'users': {
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue