Adjust host spezific setting of variables.
This commit is contained in:
@@ -0,0 +1,28 @@
|
||||
---
|
||||
# ipt-firewall configuration for b.mx.oopen.de
|
||||
# Generated by extract-fw-host-vars.py - review before committing!
|
||||
# Place in: host_vars/<hostname>/ipt_firewall.yml
|
||||
|
||||
fw_manage_config: true
|
||||
|
||||
# --- Network
|
||||
fw_ext_interfaces:
|
||||
- "eth0"
|
||||
fw_ext_ips_v4:
|
||||
- "162.55.82.73"
|
||||
fw_ext_ips_v6:
|
||||
- "2a01:4f8:271:1266::73"
|
||||
|
||||
# --- Munin
|
||||
munin_remote_ipv4: 37.27.121.227
|
||||
munin_remote_ipv6: "2a01:4f9:3070:2bda::227"
|
||||
|
||||
# --- HTTP
|
||||
fw_http_server_ips: $ext_1_ip
|
||||
|
||||
# --- Mail
|
||||
fw_smtpd_ips: $ext_1_ip
|
||||
fw_smtpd_additional_listen_ports: 2525
|
||||
|
||||
# --- Rsync
|
||||
fw_rsync_out_ips: $ext_1_ip
|
||||
@@ -0,0 +1,27 @@
|
||||
---
|
||||
# ipt-firewall configuration for b.ns.oopen.de
|
||||
# Generated by extract-fw-host-vars.py - review before committing!
|
||||
# Place in: host_vars/<hostname>/ipt_firewall.yml
|
||||
|
||||
fw_manage_config: true
|
||||
|
||||
# --- Network
|
||||
fw_ext_interfaces:
|
||||
- "eth0"
|
||||
fw_ext_ips_v4:
|
||||
- "95.217.204.204"
|
||||
fw_ext_ips_v6:
|
||||
- "2a01:4f9:4a:47e5::204"
|
||||
|
||||
# --- Munin
|
||||
munin_remote_ipv4: 37.27.121.227
|
||||
munin_remote_ipv6: "2a01:4f9:3070:2bda::227"
|
||||
|
||||
# --- DNS
|
||||
fw_dns_server_ips: $ext_ips
|
||||
|
||||
# --- VPN / WireGuard
|
||||
fw_wireguard_server_ips: $ext_ips
|
||||
|
||||
# --- Block
|
||||
fw_blocked_ips: 222.184.0.0/13 61.160.0.0/16 116.8.0.0/14
|
||||
@@ -0,0 +1,24 @@
|
||||
---
|
||||
# ipt-firewall configuration for backup.warenform.de
|
||||
# Generated by extract-fw-host-vars.py - review before committing!
|
||||
# Place in: host_vars/<hostname>/ipt_firewall.yml
|
||||
|
||||
fw_manage_config: true
|
||||
|
||||
# --- Network
|
||||
fw_ext_interfaces:
|
||||
- "eth0"
|
||||
fw_ext_ips_v4:
|
||||
- "78.46.47.84"
|
||||
fw_ext_ips_v6:
|
||||
- "2a01:4f8:110:401b::84"
|
||||
|
||||
# --- Munin
|
||||
munin_remote_ipv4: 37.27.121.227
|
||||
munin_remote_ipv6: "2a01:4f9:3070:2bda::227"
|
||||
|
||||
# --- HTTP
|
||||
fw_http_server_ips: $ext_1_ip
|
||||
|
||||
# --- Block
|
||||
fw_blocked_ips: 222.184.0.0/13 61.160.0.0/16 116.8.0.0/14
|
||||
@@ -0,0 +1,27 @@
|
||||
---
|
||||
# ipt-firewall configuration for cl-02.oopen.de
|
||||
# Generated by extract-fw-host-vars.py - review before committing!
|
||||
# Place in: host_vars/<hostname>/ipt_firewall.yml
|
||||
|
||||
fw_manage_config: true
|
||||
|
||||
# --- Network
|
||||
fw_ext_interfaces:
|
||||
- "eth0"
|
||||
fw_ext_ips_v4:
|
||||
- "95.217.204.203"
|
||||
fw_ext_ips_v6:
|
||||
- "2a01:4f9:4a:47e5::203"
|
||||
|
||||
# --- Munin
|
||||
munin_remote_ipv4: 37.27.121.227
|
||||
munin_remote_ipv6: "2a01:4f9:3070:2bda::227"
|
||||
|
||||
# --- HTTP
|
||||
fw_http_server_ips: $ext_1_ip
|
||||
|
||||
# --- Mail
|
||||
fw_mail_client_ips: $ext_1_ip
|
||||
|
||||
# --- Block
|
||||
fw_blocked_ips: 222.184.0.0/13 61.160.0.0/16 116.8.0.0/14
|
||||
@@ -0,0 +1,24 @@
|
||||
---
|
||||
# ipt-firewall configuration for cl-dissens.oopen.de
|
||||
# Generated by extract-fw-host-vars.py - review before committing!
|
||||
# Place in: host_vars/<hostname>/ipt_firewall.yml
|
||||
|
||||
fw_manage_config: true
|
||||
|
||||
# --- Network
|
||||
fw_ext_interfaces:
|
||||
- "eth0"
|
||||
fw_ext_ips_v4:
|
||||
- "65.21.220.152"
|
||||
fw_ext_ips_v6:
|
||||
- "2a01:4f9:3080:318c::152"
|
||||
|
||||
# --- Munin
|
||||
munin_remote_ipv4: 37.27.121.227
|
||||
munin_remote_ipv6: "2a01:4f9:3070:2bda::227"
|
||||
|
||||
# --- HTTP
|
||||
fw_http_server_ips: $ext_1_ip
|
||||
|
||||
# --- Mail
|
||||
fw_mail_client_ips: $ext_1_ip
|
||||
@@ -0,0 +1,24 @@
|
||||
---
|
||||
# ipt-firewall configuration for cl-flr.oopen.de
|
||||
# Generated by extract-fw-host-vars.py - review before committing!
|
||||
# Place in: host_vars/<hostname>/ipt_firewall.yml
|
||||
|
||||
fw_manage_config: true
|
||||
|
||||
# --- Network
|
||||
fw_ext_interfaces:
|
||||
- "eth0"
|
||||
fw_ext_ips_v4:
|
||||
- "176.9.125.5"
|
||||
fw_ext_ips_v6:
|
||||
- "2a01:4f8:151:8415::5"
|
||||
|
||||
# --- Munin
|
||||
munin_remote_ipv4: 37.27.121.227
|
||||
munin_remote_ipv6: "2a01:4f9:3070:2bda::227"
|
||||
|
||||
# --- HTTP
|
||||
fw_http_server_ips: $ext_1_ip
|
||||
|
||||
# --- Mail
|
||||
fw_mail_client_ips: $ext_1_ip
|
||||
@@ -0,0 +1,27 @@
|
||||
---
|
||||
# ipt-firewall configuration for cl-fm.oopen.de
|
||||
# Generated by extract-fw-host-vars.py - review before committing!
|
||||
# Place in: host_vars/<hostname>/ipt_firewall.yml
|
||||
|
||||
fw_manage_config: true
|
||||
|
||||
# --- Network
|
||||
fw_ext_interfaces:
|
||||
- "eth0"
|
||||
fw_ext_ips_v4:
|
||||
- "142.132.147.170"
|
||||
fw_ext_ips_v6:
|
||||
- "2a01:4f8:261:1994::170"
|
||||
|
||||
# --- Munin
|
||||
munin_remote_ipv4: 37.27.121.227
|
||||
munin_remote_ipv6: "2a01:4f9:3070:2bda::227"
|
||||
|
||||
# --- HTTP
|
||||
fw_http_server_ips: $ext_1_ip
|
||||
|
||||
# --- Mail
|
||||
fw_mail_client_ips: $ext_1_ip
|
||||
|
||||
# --- Block
|
||||
fw_blocked_ips: 222.184.0.0/13 61.160.0.0/16 116.8.0.0/14
|
||||
@@ -42,8 +42,8 @@ systemd_resolved: true
|
||||
# IPv6: 2606:4700:4700::1111
|
||||
# sekundäre DNS-Adresse
|
||||
# IPv4: 1.0.0.1
|
||||
# IPv6: 2606:4700:4700::1001
|
||||
#
|
||||
# IPv6: 2606:4700:4700::1001
|
||||
#
|
||||
# Google (USA) Public DNS - Großartige Kombination aus Geschwindigkeit und Sicherheit
|
||||
# primäre DNS-Adresse
|
||||
# IPv4: 8.8.8.8
|
||||
@@ -54,20 +54,20 @@ systemd_resolved: true
|
||||
#
|
||||
# Quad9 (CH) - Blockiert mühelos schädliche Seiten und verhindert Phishing-Betrug
|
||||
# primäre DNS-Adresse
|
||||
# IPv4: 9.9.9.9
|
||||
# IPv6: 2620:fe::fe
|
||||
# IPv4: 9.9.9.9
|
||||
# IPv6: 2620:fe::fe
|
||||
# sekundäre DNS-Adresse
|
||||
# IPv4: 149.112.112.112
|
||||
# IPv6: 2620:fe::9
|
||||
#
|
||||
# OpenNIC - https://www.opennic.org/
|
||||
# IPv4: 195.10.195.195 - ns31.de
|
||||
# IPv4: 94.16.114.254 - ns28.de
|
||||
# IPv4: 51.254.162.59 - ns9.de
|
||||
# IPv4: 195.10.195.195 - ns31.de
|
||||
# IPv4: 94.16.114.254 - ns28.de
|
||||
# IPv4: 51.254.162.59 - ns9.de
|
||||
# IPv4: 194.36.144.87 - ns29.de
|
||||
# IPv6: 2a00:f826:8:2::195 - ns31.de
|
||||
#
|
||||
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
|
||||
#
|
||||
# Freifunk München (normales DNS, DNS-over-TLS und DNS-over-HTTPS)
|
||||
# IPv4: 5.1.66.255
|
||||
# IPv6: 2001:678:e68:f000::
|
||||
# Servername für DNS-over-TLS: dot.ffmuc.net
|
||||
@@ -83,7 +83,7 @@ resolved_nameserver:
|
||||
|
||||
# search domains
|
||||
#
|
||||
# If there are more than one search domains, then specify them here in the order in which
|
||||
# If there are more than one search domains, then specify them here in the order in which
|
||||
# the resolver should also search them
|
||||
#
|
||||
#resolved_domains: []
|
||||
|
||||
@@ -0,0 +1,24 @@
|
||||
---
|
||||
# ipt-firewall configuration for cl-irights.oopen.de
|
||||
# Generated by extract-fw-host-vars.py - review before committing!
|
||||
# Place in: host_vars/<hostname>/ipt_firewall.yml
|
||||
|
||||
fw_manage_config: true
|
||||
|
||||
# --- Network
|
||||
fw_ext_interfaces:
|
||||
- "eth0"
|
||||
fw_ext_ips_v4:
|
||||
- "157.90.140.168"
|
||||
fw_ext_ips_v6:
|
||||
- "2a01:4f8:2220:37c3::168"
|
||||
|
||||
# --- Munin
|
||||
munin_remote_ipv4: 37.27.121.227
|
||||
munin_remote_ipv6: "2a01:4f9:3070:2bda::227"
|
||||
|
||||
# --- HTTP
|
||||
fw_http_server_ips: $ext_1_ip
|
||||
|
||||
# --- Mail
|
||||
fw_mail_client_ips: $ext_1_ip
|
||||
@@ -0,0 +1,27 @@
|
||||
---
|
||||
# ipt-firewall configuration for cl-fm.oopen.de
|
||||
# Generated by extract-fw-host-vars.py - review before committing!
|
||||
# Place in: host_vars/<hostname>/ipt_firewall.yml
|
||||
|
||||
fw_manage_config: true
|
||||
|
||||
# --- Network
|
||||
fw_ext_interfaces:
|
||||
- "eth0"
|
||||
fw_ext_ips_v4:
|
||||
- "46.224.120.108"
|
||||
fw_ext_ips_v6:
|
||||
- "2a01:4f8:1c1a:4d53::1"
|
||||
|
||||
# --- Munin
|
||||
munin_remote_ipv4: 37.27.121.227
|
||||
munin_remote_ipv6: "2a01:4f9:3070:2bda::227"
|
||||
|
||||
# --- HTTP
|
||||
fw_http_server_ips: $ext_1_ip
|
||||
|
||||
# --- Mail
|
||||
fw_mail_client_ips: $ext_1_ip
|
||||
|
||||
# --- Block
|
||||
#fw_blocked_ips: 222.184.0.0/13 61.160.0.0/16 116.8.0.0/14
|
||||
@@ -0,0 +1,25 @@
|
||||
---
|
||||
# ipt-firewall configuration for cl-ndm.oopen.de
|
||||
# Generated by extract-fw-host-vars.py - review before committing!
|
||||
# Place in: host_vars/<hostname>/ipt_firewall.yml
|
||||
|
||||
fw_manage_config: true
|
||||
|
||||
# --- Network
|
||||
fw_ext_interfaces:
|
||||
- "eth0"
|
||||
fw_ext_ips_v4:
|
||||
- "88.198.56.197"
|
||||
fw_ext_ips_v6:
|
||||
- "2a01:4f8:222:2c2::197"
|
||||
|
||||
# --- Munin
|
||||
munin_remote_ipv4: 37.27.121.227
|
||||
munin_remote_ipv6: "2a01:4f9:3070:2bda::227"
|
||||
|
||||
# --- HTTP
|
||||
fw_http_server_ips: $ext_1_ip
|
||||
|
||||
# --- Mail
|
||||
fw_smtpd_additional_outgoing_ports: 2525
|
||||
fw_mail_client_ips: $ext_1_ip
|
||||
@@ -180,9 +180,9 @@ copy_plain_files:
|
||||
|
||||
copy_plain_files_postfwd_host_specific:
|
||||
|
||||
- name: postfwd.wl-hosts
|
||||
src_path: mail.cadus/etc/postfix/postfwd.wl-hosts
|
||||
dest_path: /etc/postfix/postfwd.wl-hosts
|
||||
- name: postfwd.high-rate-number-messages
|
||||
src_path: mail.cadus/etc/postfix/postfwd.high-rate-number-messages
|
||||
dest_path: /etc/postfix/postfwd.high-rate-number-messages
|
||||
|
||||
- name: postfwd.wl-nets
|
||||
src_path: mail.cadus/etc/postfix/postfwd.wl-nets
|
||||
|
||||
Reference in New Issue
Block a user