db-riscv-koji01: allow connections from hub

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-01-27 15:29:59 -08:00 · 2025-01-27 15:29:59 -08:00 · 22a61065b2
commit 22a61065b2
parent 3938bd35e2
1 changed files with 3 additions and 0 deletions
--- a/inventory/host_vars/db-riscv-koji01.iad2.fedoraproject.org
+++ b/inventory/host_vars/db-riscv-koji01.iad2.fedoraproject.org
@ -1,5 +1,8 @@
 ---
 # This is a generic list, monitored by collectd
+custom_rules: ['-A INPUT -p tcp -m tcp -s 10.3.172.21 --dport 5432 -j ACCEPT']
+nft_custom_rules:
+  - 'add rule ip filter INPUT ip saddr 10.3.172.21 tcp dport 5432 counter accept'
 databases:
  - koji
 datacenter: iad2