From 12ba240411a6f723a95547b1156b0f7327ea1895 Mon Sep 17 00:00:00 2001 From: Christoph Date: Thu, 2 Jul 2026 20:39:18 +0200 Subject: [PATCH] Adjust host spezific setting of variables. --- host_vars/b.mx.oopen.de/ipt-server.yml | 28 ++++++++++++++++++++ host_vars/b.ns.oopen.de/ipt-server.yml | 27 +++++++++++++++++++ host_vars/backup.warenform.de/ipt-server.yml | 24 +++++++++++++++++ host_vars/cl-02.oopen.de/ipt-server.yml | 27 +++++++++++++++++++ host_vars/cl-dissens.oopen.de/ipt-server.yml | 24 +++++++++++++++++ host_vars/cl-flr.oopen.de/ipt-server.yml | 24 +++++++++++++++++ host_vars/cl-fm.oopen.de/ipt-server.yml | 27 +++++++++++++++++++ host_vars/cl-irights.oopen.de.yml | 20 +++++++------- host_vars/cl-irights.oopen.de/ipt-server.yml | 24 +++++++++++++++++ host_vars/cl-lubax.oopen.de/ipt-server.yml | 27 +++++++++++++++++++ host_vars/cl-ndm.oopen.de/ipt-server.yml | 25 +++++++++++++++++ host_vars/mail.cadus.org.yml | 6 ++--- hosts | 2 +- 13 files changed, 271 insertions(+), 14 deletions(-) create mode 100644 host_vars/b.mx.oopen.de/ipt-server.yml create mode 100644 host_vars/b.ns.oopen.de/ipt-server.yml create mode 100644 host_vars/backup.warenform.de/ipt-server.yml create mode 100644 host_vars/cl-02.oopen.de/ipt-server.yml create mode 100644 host_vars/cl-dissens.oopen.de/ipt-server.yml create mode 100644 host_vars/cl-flr.oopen.de/ipt-server.yml create mode 100644 host_vars/cl-fm.oopen.de/ipt-server.yml create mode 100644 host_vars/cl-irights.oopen.de/ipt-server.yml create mode 100644 host_vars/cl-lubax.oopen.de/ipt-server.yml create mode 100644 host_vars/cl-ndm.oopen.de/ipt-server.yml diff --git a/host_vars/b.mx.oopen.de/ipt-server.yml b/host_vars/b.mx.oopen.de/ipt-server.yml new file mode 100644 index 0000000..bbb149e --- /dev/null +++ b/host_vars/b.mx.oopen.de/ipt-server.yml @@ -0,0 +1,28 @@ +--- +# ipt-firewall configuration for b.mx.oopen.de +# Generated by extract-fw-host-vars.py - review before committing! +# Place in: host_vars//ipt_firewall.yml + +fw_manage_config: true + +# --- Network +fw_ext_interfaces: + - "eth0" +fw_ext_ips_v4: + - "162.55.82.73" +fw_ext_ips_v6: + - "2a01:4f8:271:1266::73" + +# --- Munin +munin_remote_ipv4: 37.27.121.227 +munin_remote_ipv6: "2a01:4f9:3070:2bda::227" + +# --- HTTP +fw_http_server_ips: $ext_1_ip + +# --- Mail +fw_smtpd_ips: $ext_1_ip +fw_smtpd_additional_listen_ports: 2525 + +# --- Rsync +fw_rsync_out_ips: $ext_1_ip diff --git a/host_vars/b.ns.oopen.de/ipt-server.yml b/host_vars/b.ns.oopen.de/ipt-server.yml new file mode 100644 index 0000000..86fc548 --- /dev/null +++ b/host_vars/b.ns.oopen.de/ipt-server.yml @@ -0,0 +1,27 @@ +--- +# ipt-firewall configuration for b.ns.oopen.de +# Generated by extract-fw-host-vars.py - review before committing! +# Place in: host_vars//ipt_firewall.yml + +fw_manage_config: true + +# --- Network +fw_ext_interfaces: + - "eth0" +fw_ext_ips_v4: + - "95.217.204.204" +fw_ext_ips_v6: + - "2a01:4f9:4a:47e5::204" + +# --- Munin +munin_remote_ipv4: 37.27.121.227 +munin_remote_ipv6: "2a01:4f9:3070:2bda::227" + +# --- DNS +fw_dns_server_ips: $ext_ips + +# --- VPN / WireGuard +fw_wireguard_server_ips: $ext_ips + +# --- Block +fw_blocked_ips: 222.184.0.0/13 61.160.0.0/16 116.8.0.0/14 diff --git a/host_vars/backup.warenform.de/ipt-server.yml b/host_vars/backup.warenform.de/ipt-server.yml new file mode 100644 index 0000000..b589fdb --- /dev/null +++ b/host_vars/backup.warenform.de/ipt-server.yml @@ -0,0 +1,24 @@ +--- +# ipt-firewall configuration for backup.warenform.de +# Generated by extract-fw-host-vars.py - review before committing! +# Place in: host_vars//ipt_firewall.yml + +fw_manage_config: true + +# --- Network +fw_ext_interfaces: + - "eth0" +fw_ext_ips_v4: + - "78.46.47.84" +fw_ext_ips_v6: + - "2a01:4f8:110:401b::84" + +# --- Munin +munin_remote_ipv4: 37.27.121.227 +munin_remote_ipv6: "2a01:4f9:3070:2bda::227" + +# --- HTTP +fw_http_server_ips: $ext_1_ip + +# --- Block +fw_blocked_ips: 222.184.0.0/13 61.160.0.0/16 116.8.0.0/14 diff --git a/host_vars/cl-02.oopen.de/ipt-server.yml b/host_vars/cl-02.oopen.de/ipt-server.yml new file mode 100644 index 0000000..a3d706e --- /dev/null +++ b/host_vars/cl-02.oopen.de/ipt-server.yml @@ -0,0 +1,27 @@ +--- +# ipt-firewall configuration for cl-02.oopen.de +# Generated by extract-fw-host-vars.py - review before committing! +# Place in: host_vars//ipt_firewall.yml + +fw_manage_config: true + +# --- Network +fw_ext_interfaces: + - "eth0" +fw_ext_ips_v4: + - "95.217.204.203" +fw_ext_ips_v6: + - "2a01:4f9:4a:47e5::203" + +# --- Munin +munin_remote_ipv4: 37.27.121.227 +munin_remote_ipv6: "2a01:4f9:3070:2bda::227" + +# --- HTTP +fw_http_server_ips: $ext_1_ip + +# --- Mail +fw_mail_client_ips: $ext_1_ip + +# --- Block +fw_blocked_ips: 222.184.0.0/13 61.160.0.0/16 116.8.0.0/14 diff --git a/host_vars/cl-dissens.oopen.de/ipt-server.yml b/host_vars/cl-dissens.oopen.de/ipt-server.yml new file mode 100644 index 0000000..a57ac74 --- /dev/null +++ b/host_vars/cl-dissens.oopen.de/ipt-server.yml @@ -0,0 +1,24 @@ +--- +# ipt-firewall configuration for cl-dissens.oopen.de +# Generated by extract-fw-host-vars.py - review before committing! +# Place in: host_vars//ipt_firewall.yml + +fw_manage_config: true + +# --- Network +fw_ext_interfaces: + - "eth0" +fw_ext_ips_v4: + - "65.21.220.152" +fw_ext_ips_v6: + - "2a01:4f9:3080:318c::152" + +# --- Munin +munin_remote_ipv4: 37.27.121.227 +munin_remote_ipv6: "2a01:4f9:3070:2bda::227" + +# --- HTTP +fw_http_server_ips: $ext_1_ip + +# --- Mail +fw_mail_client_ips: $ext_1_ip diff --git a/host_vars/cl-flr.oopen.de/ipt-server.yml b/host_vars/cl-flr.oopen.de/ipt-server.yml new file mode 100644 index 0000000..3189f5d --- /dev/null +++ b/host_vars/cl-flr.oopen.de/ipt-server.yml @@ -0,0 +1,24 @@ +--- +# ipt-firewall configuration for cl-flr.oopen.de +# Generated by extract-fw-host-vars.py - review before committing! +# Place in: host_vars//ipt_firewall.yml + +fw_manage_config: true + +# --- Network +fw_ext_interfaces: + - "eth0" +fw_ext_ips_v4: + - "176.9.125.5" +fw_ext_ips_v6: + - "2a01:4f8:151:8415::5" + +# --- Munin +munin_remote_ipv4: 37.27.121.227 +munin_remote_ipv6: "2a01:4f9:3070:2bda::227" + +# --- HTTP +fw_http_server_ips: $ext_1_ip + +# --- Mail +fw_mail_client_ips: $ext_1_ip diff --git a/host_vars/cl-fm.oopen.de/ipt-server.yml b/host_vars/cl-fm.oopen.de/ipt-server.yml new file mode 100644 index 0000000..31dd78c --- /dev/null +++ b/host_vars/cl-fm.oopen.de/ipt-server.yml @@ -0,0 +1,27 @@ +--- +# ipt-firewall configuration for cl-fm.oopen.de +# Generated by extract-fw-host-vars.py - review before committing! +# Place in: host_vars//ipt_firewall.yml + +fw_manage_config: true + +# --- Network +fw_ext_interfaces: + - "eth0" +fw_ext_ips_v4: + - "142.132.147.170" +fw_ext_ips_v6: + - "2a01:4f8:261:1994::170" + +# --- Munin +munin_remote_ipv4: 37.27.121.227 +munin_remote_ipv6: "2a01:4f9:3070:2bda::227" + +# --- HTTP +fw_http_server_ips: $ext_1_ip + +# --- Mail +fw_mail_client_ips: $ext_1_ip + +# --- Block +fw_blocked_ips: 222.184.0.0/13 61.160.0.0/16 116.8.0.0/14 diff --git a/host_vars/cl-irights.oopen.de.yml b/host_vars/cl-irights.oopen.de.yml index a4da310..eff9024 100644 --- a/host_vars/cl-irights.oopen.de.yml +++ b/host_vars/cl-irights.oopen.de.yml @@ -42,8 +42,8 @@ systemd_resolved: true # IPv6: 2606:4700:4700::1111 # sekundäre DNS-Adresse # IPv4: 1.0.0.1 -# IPv6: 2606:4700:4700::1001 -# +# IPv6: 2606:4700:4700::1001 +# # Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit # primäre DNS-Adresse # IPv4: 8.8.8.8 @@ -54,20 +54,20 @@ systemd_resolved: true # # Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug # primäre DNS-Adresse -# IPv4: 9.9.9.9 -# IPv6: 2620:fe::fe +# IPv4: 9.9.9.9 +# IPv6: 2620:fe::fe # sekundäre DNS-Adresse # IPv4: 149.112.112.112 # IPv6: 2620:fe::9 # # OpenNIC - https://www.opennic.org/ -# IPv4: 195.10.195.195 - ns31.de -# IPv4: 94.16.114.254 - ns28.de -# IPv4: 51.254.162.59 - ns9.de +# IPv4: 195.10.195.195 - ns31.de +# IPv4: 94.16.114.254 - ns28.de +# IPv4: 51.254.162.59 - ns9.de # IPv4: 194.36.144.87 - ns29.de # IPv6: 2a00:f826:8:2::195 - ns31.de -# -# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS) +# +# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS) # IPv4: 5.1.66.255 # IPv6: 2001:678:e68:f000:: # Servername für DNS-over-TLS: dot.ffmuc.net @@ -83,7 +83,7 @@ resolved_nameserver: # search domains # -# If there are more than one search domains, then specify them here in the order in which +# If there are more than one search domains, then specify them here in the order in which # the resolver should also search them # #resolved_domains: [] diff --git a/host_vars/cl-irights.oopen.de/ipt-server.yml b/host_vars/cl-irights.oopen.de/ipt-server.yml new file mode 100644 index 0000000..97a3fa6 --- /dev/null +++ b/host_vars/cl-irights.oopen.de/ipt-server.yml @@ -0,0 +1,24 @@ +--- +# ipt-firewall configuration for cl-irights.oopen.de +# Generated by extract-fw-host-vars.py - review before committing! +# Place in: host_vars//ipt_firewall.yml + +fw_manage_config: true + +# --- Network +fw_ext_interfaces: + - "eth0" +fw_ext_ips_v4: + - "157.90.140.168" +fw_ext_ips_v6: + - "2a01:4f8:2220:37c3::168" + +# --- Munin +munin_remote_ipv4: 37.27.121.227 +munin_remote_ipv6: "2a01:4f9:3070:2bda::227" + +# --- HTTP +fw_http_server_ips: $ext_1_ip + +# --- Mail +fw_mail_client_ips: $ext_1_ip diff --git a/host_vars/cl-lubax.oopen.de/ipt-server.yml b/host_vars/cl-lubax.oopen.de/ipt-server.yml new file mode 100644 index 0000000..3768a0d --- /dev/null +++ b/host_vars/cl-lubax.oopen.de/ipt-server.yml @@ -0,0 +1,27 @@ +--- +# ipt-firewall configuration for cl-fm.oopen.de +# Generated by extract-fw-host-vars.py - review before committing! +# Place in: host_vars//ipt_firewall.yml + +fw_manage_config: true + +# --- Network +fw_ext_interfaces: + - "eth0" +fw_ext_ips_v4: + - "46.224.120.108" +fw_ext_ips_v6: + - "2a01:4f8:1c1a:4d53::1" + +# --- Munin +munin_remote_ipv4: 37.27.121.227 +munin_remote_ipv6: "2a01:4f9:3070:2bda::227" + +# --- HTTP +fw_http_server_ips: $ext_1_ip + +# --- Mail +fw_mail_client_ips: $ext_1_ip + +# --- Block +#fw_blocked_ips: 222.184.0.0/13 61.160.0.0/16 116.8.0.0/14 diff --git a/host_vars/cl-ndm.oopen.de/ipt-server.yml b/host_vars/cl-ndm.oopen.de/ipt-server.yml new file mode 100644 index 0000000..2608b2f --- /dev/null +++ b/host_vars/cl-ndm.oopen.de/ipt-server.yml @@ -0,0 +1,25 @@ +--- +# ipt-firewall configuration for cl-ndm.oopen.de +# Generated by extract-fw-host-vars.py - review before committing! +# Place in: host_vars//ipt_firewall.yml + +fw_manage_config: true + +# --- Network +fw_ext_interfaces: + - "eth0" +fw_ext_ips_v4: + - "88.198.56.197" +fw_ext_ips_v6: + - "2a01:4f8:222:2c2::197" + +# --- Munin +munin_remote_ipv4: 37.27.121.227 +munin_remote_ipv6: "2a01:4f9:3070:2bda::227" + +# --- HTTP +fw_http_server_ips: $ext_1_ip + +# --- Mail +fw_smtpd_additional_outgoing_ports: 2525 +fw_mail_client_ips: $ext_1_ip diff --git a/host_vars/mail.cadus.org.yml b/host_vars/mail.cadus.org.yml index c306d74..b44410b 100644 --- a/host_vars/mail.cadus.org.yml +++ b/host_vars/mail.cadus.org.yml @@ -180,9 +180,9 @@ copy_plain_files: copy_plain_files_postfwd_host_specific: - - name: postfwd.wl-hosts - src_path: mail.cadus/etc/postfix/postfwd.wl-hosts - dest_path: /etc/postfix/postfwd.wl-hosts + - name: postfwd.high-rate-number-messages + src_path: mail.cadus/etc/postfix/postfwd.high-rate-number-messages + dest_path: /etc/postfix/postfwd.high-rate-number-messages - name: postfwd.wl-nets src_path: mail.cadus/etc/postfix/postfwd.wl-nets diff --git a/hosts b/hosts index ff8ffd4..1b506cf 100644 --- a/hosts +++ b/hosts @@ -36,7 +36,7 @@ ak-plan.oopen.de discourse.oopen.de test-nd.oopen.de formbricks-nd.oopen.de -cl-lubax.oopen.de +#cl-lubax.oopen.de [dns_sinma]