Adjust host spezific setting of variables.

host_vars/b.mx.oopen.de/ipt-server.yml

@@ -0,0 +1,28 @@
+---
+# ipt-firewall configuration for b.mx.oopen.de
+# Generated by extract-fw-host-vars.py - review before committing!
+# Place in: host_vars/<hostname>/ipt_firewall.yml
+
+fw_manage_config: true
+
+# --- Network
+fw_ext_interfaces:
+  - "eth0"
+fw_ext_ips_v4:
+  - "162.55.82.73"
+fw_ext_ips_v6:
+  - "2a01:4f8:271:1266::73"
+
+# --- Munin
+munin_remote_ipv4: 37.27.121.227
+munin_remote_ipv6: "2a01:4f9:3070:2bda::227"
+
+# --- HTTP
+fw_http_server_ips: $ext_1_ip
+
+# --- Mail
+fw_smtpd_ips: $ext_1_ip
+fw_smtpd_additional_listen_ports: 2525
+
+# --- Rsync
+fw_rsync_out_ips: $ext_1_ip

host_vars/b.ns.oopen.de/ipt-server.yml

@@ -0,0 +1,27 @@
+---
+# ipt-firewall configuration for b.ns.oopen.de
+# Generated by extract-fw-host-vars.py - review before committing!
+# Place in: host_vars/<hostname>/ipt_firewall.yml
+
+fw_manage_config: true
+
+# --- Network
+fw_ext_interfaces:
+  - "eth0"
+fw_ext_ips_v4:
+  - "95.217.204.204"
+fw_ext_ips_v6:
+  - "2a01:4f9:4a:47e5::204"
+
+# --- Munin
+munin_remote_ipv4: 37.27.121.227
+munin_remote_ipv6: "2a01:4f9:3070:2bda::227"
+
+# --- DNS
+fw_dns_server_ips: $ext_ips
+
+# --- VPN / WireGuard
+fw_wireguard_server_ips: $ext_ips
+
+# --- Block
+fw_blocked_ips: 222.184.0.0/13 61.160.0.0/16 116.8.0.0/14

host_vars/backup.warenform.de/ipt-server.yml

@@ -0,0 +1,24 @@
+---
+# ipt-firewall configuration for backup.warenform.de
+# Generated by extract-fw-host-vars.py - review before committing!
+# Place in: host_vars/<hostname>/ipt_firewall.yml
+
+fw_manage_config: true
+
+# --- Network
+fw_ext_interfaces:
+  - "eth0"
+fw_ext_ips_v4:
+  - "78.46.47.84"
+fw_ext_ips_v6:
+  - "2a01:4f8:110:401b::84"
+
+# --- Munin
+munin_remote_ipv4: 37.27.121.227
+munin_remote_ipv6: "2a01:4f9:3070:2bda::227"
+
+# --- HTTP
+fw_http_server_ips: $ext_1_ip
+
+# --- Block
+fw_blocked_ips: 222.184.0.0/13 61.160.0.0/16 116.8.0.0/14

host_vars/cl-02.oopen.de/ipt-server.yml

@@ -0,0 +1,27 @@
+---
+# ipt-firewall configuration for cl-02.oopen.de
+# Generated by extract-fw-host-vars.py - review before committing!
+# Place in: host_vars/<hostname>/ipt_firewall.yml
+
+fw_manage_config: true
+
+# --- Network
+fw_ext_interfaces:
+  - "eth0"
+fw_ext_ips_v4:
+  - "95.217.204.203"
+fw_ext_ips_v6:
+  - "2a01:4f9:4a:47e5::203"
+
+# --- Munin
+munin_remote_ipv4: 37.27.121.227
+munin_remote_ipv6: "2a01:4f9:3070:2bda::227"
+
+# --- HTTP
+fw_http_server_ips: $ext_1_ip
+
+# --- Mail
+fw_mail_client_ips: $ext_1_ip
+
+# --- Block
+fw_blocked_ips: 222.184.0.0/13 61.160.0.0/16 116.8.0.0/14

host_vars/cl-dissens.oopen.de/ipt-server.yml

@@ -0,0 +1,24 @@
+---
+# ipt-firewall configuration for cl-dissens.oopen.de
+# Generated by extract-fw-host-vars.py - review before committing!
+# Place in: host_vars/<hostname>/ipt_firewall.yml
+
+fw_manage_config: true
+
+# --- Network
+fw_ext_interfaces:
+  - "eth0"
+fw_ext_ips_v4:
+  - "65.21.220.152"
+fw_ext_ips_v6:
+  - "2a01:4f9:3080:318c::152"
+
+# --- Munin
+munin_remote_ipv4: 37.27.121.227
+munin_remote_ipv6: "2a01:4f9:3070:2bda::227"
+
+# --- HTTP
+fw_http_server_ips: $ext_1_ip
+
+# --- Mail
+fw_mail_client_ips: $ext_1_ip

host_vars/cl-flr.oopen.de/ipt-server.yml

@@ -0,0 +1,24 @@
+---
+# ipt-firewall configuration for cl-flr.oopen.de
+# Generated by extract-fw-host-vars.py - review before committing!
+# Place in: host_vars/<hostname>/ipt_firewall.yml
+
+fw_manage_config: true
+
+# --- Network
+fw_ext_interfaces:
+  - "eth0"
+fw_ext_ips_v4:
+  - "176.9.125.5"
+fw_ext_ips_v6:
+  - "2a01:4f8:151:8415::5"
+
+# --- Munin
+munin_remote_ipv4: 37.27.121.227
+munin_remote_ipv6: "2a01:4f9:3070:2bda::227"
+
+# --- HTTP
+fw_http_server_ips: $ext_1_ip
+
+# --- Mail
+fw_mail_client_ips: $ext_1_ip

host_vars/cl-fm.oopen.de/ipt-server.yml

@@ -0,0 +1,27 @@
+---
+# ipt-firewall configuration for cl-fm.oopen.de
+# Generated by extract-fw-host-vars.py - review before committing!
+# Place in: host_vars/<hostname>/ipt_firewall.yml
+
+fw_manage_config: true
+
+# --- Network
+fw_ext_interfaces:
+  - "eth0"
+fw_ext_ips_v4:
+  - "142.132.147.170"
+fw_ext_ips_v6:
+  - "2a01:4f8:261:1994::170"
+
+# --- Munin
+munin_remote_ipv4: 37.27.121.227
+munin_remote_ipv6: "2a01:4f9:3070:2bda::227"
+
+# --- HTTP
+fw_http_server_ips: $ext_1_ip
+
+# --- Mail
+fw_mail_client_ips: $ext_1_ip
+
+# --- Block
+fw_blocked_ips: 222.184.0.0/13 61.160.0.0/16 116.8.0.0/14

host_vars/cl-irights.oopen.de.yml

@@ -42,8 +42,8 @@ systemd_resolved: true
 #      IPv6: 2606:4700:4700::1111
 #   sekundäre DNS-Adresse
 #      IPv4: 1.0.0.1
-#      IPv6: 2606:4700:4700::1001 
+#      IPv6: 2606:4700:4700::1001
-# 
+#
 # Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit
 #   primäre DNS-Adresse
 #      IPv4: 8.8.8.8
@@ -54,20 +54,20 @@ systemd_resolved: true
 #
 # Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug
 #   primäre DNS-Adresse
-#      IPv4: 9.9.9.9  
+#      IPv4: 9.9.9.9
-#      IPv6: 2620:fe::fe 
+#      IPv6: 2620:fe::fe
 #   sekundäre DNS-Adresse
 #      IPv4: 149.112.112.112
 #      IPv6: 2620:fe::9
 #
 # OpenNIC - https://www.opennic.org/
-#      IPv4: 195.10.195.195 - ns31.de 
+#      IPv4: 195.10.195.195 - ns31.de
-#      IPv4: 94.16.114.254  - ns28.de 
+#      IPv4: 94.16.114.254  - ns28.de
-#      IPv4: 51.254.162.59  - ns9.de   
+#      IPv4: 51.254.162.59  - ns9.de
 #      IPv4: 194.36.144.87  - ns29.de
 #      IPv6: 2a00:f826:8:2::195 - ns31.de
-# 
+#
-# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS) 
+# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
 #    IPv4: 5.1.66.255
 #    IPv6: 2001:678:e68:f000::
 #    Servername für DNS-over-TLS: dot.ffmuc.net
@@ -83,7 +83,7 @@ resolved_nameserver:
 
 # search domains
 #
-# If there are more than one search domains, then specify them here in the order in which 
+# If there are more than one search domains, then specify them here in the order in which
 # the resolver should also search them
 #
 #resolved_domains: []

host_vars/cl-irights.oopen.de/ipt-server.yml

@@ -0,0 +1,24 @@
+---
+# ipt-firewall configuration for cl-irights.oopen.de
+# Generated by extract-fw-host-vars.py - review before committing!
+# Place in: host_vars/<hostname>/ipt_firewall.yml
+
+fw_manage_config: true
+
+# --- Network
+fw_ext_interfaces:
+  - "eth0"
+fw_ext_ips_v4:
+  - "157.90.140.168"
+fw_ext_ips_v6:
+  - "2a01:4f8:2220:37c3::168"
+
+# --- Munin
+munin_remote_ipv4: 37.27.121.227
+munin_remote_ipv6: "2a01:4f9:3070:2bda::227"
+
+# --- HTTP
+fw_http_server_ips: $ext_1_ip
+
+# --- Mail
+fw_mail_client_ips: $ext_1_ip

host_vars/cl-lubax.oopen.de/ipt-server.yml

@@ -0,0 +1,27 @@
+---
+# ipt-firewall configuration for cl-fm.oopen.de
+# Generated by extract-fw-host-vars.py - review before committing!
+# Place in: host_vars/<hostname>/ipt_firewall.yml
+
+fw_manage_config: true
+
+# --- Network
+fw_ext_interfaces:
+  - "eth0"
+fw_ext_ips_v4:
+  - "46.224.120.108"
+fw_ext_ips_v6:
+  - "2a01:4f8:1c1a:4d53::1"
+
+# --- Munin
+munin_remote_ipv4: 37.27.121.227
+munin_remote_ipv6: "2a01:4f9:3070:2bda::227"
+
+# --- HTTP
+fw_http_server_ips: $ext_1_ip
+
+# --- Mail
+fw_mail_client_ips: $ext_1_ip
+
+# --- Block
+#fw_blocked_ips: 222.184.0.0/13 61.160.0.0/16 116.8.0.0/14

host_vars/cl-ndm.oopen.de/ipt-server.yml

@@ -0,0 +1,25 @@
+---
+# ipt-firewall configuration for cl-ndm.oopen.de
+# Generated by extract-fw-host-vars.py - review before committing!
+# Place in: host_vars/<hostname>/ipt_firewall.yml
+
+fw_manage_config: true
+
+# --- Network
+fw_ext_interfaces:
+  - "eth0"
+fw_ext_ips_v4:
+  - "88.198.56.197"
+fw_ext_ips_v6:
+  - "2a01:4f8:222:2c2::197"
+
+# --- Munin
+munin_remote_ipv4: 37.27.121.227
+munin_remote_ipv6: "2a01:4f9:3070:2bda::227"
+
+# --- HTTP
+fw_http_server_ips: $ext_1_ip
+
+# --- Mail
+fw_smtpd_additional_outgoing_ports: 2525
+fw_mail_client_ips: $ext_1_ip

host_vars/mail.cadus.org.yml

@@ -180,9 +180,9 @@ copy_plain_files:
 
 copy_plain_files_postfwd_host_specific:
 
-  - name: postfwd.wl-hosts
+  - name: postfwd.high-rate-number-messages
-    src_path: mail.cadus/etc/postfix/postfwd.wl-hosts
+    src_path: mail.cadus/etc/postfix/postfwd.high-rate-number-messages
-    dest_path: /etc/postfix/postfwd.wl-hosts
+    dest_path: /etc/postfix/postfwd.high-rate-number-messages
 
   - name: postfwd.wl-nets
     src_path: mail.cadus/etc/postfix/postfwd.wl-nets

hosts

@@ -36,7 +36,7 @@ ak-plan.oopen.de
 discourse.oopen.de
 test-nd.oopen.de
 formbricks-nd.oopen.de
-cl-lubax.oopen.de
+#cl-lubax.oopen.de
 
 [dns_sinma]