Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

copr-keygen-aws: better protect against typos

Browse source
This commit is contained in:
Pavel Raiskup 2020-02-22 12:47:12 +01:00 • committed by Pierre-Yves Chibon
parent 47560e8426
commit 595c8803fd
4 changed files with 12 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

10
inventory/group_vars/copr_keygen_aws
View file

@ -1,11 +1,13 @@
---
copr_hostbase: copr-keygen
tcp_ports: [22]
# http + signd dest ports
custom_rules: [ '-A INPUT -p tcp -m tcp -s 34.227.76.72 --dport 80 -j ACCEPT',
'-A INPUT -p tcp -m tcp -s 34.227.76.72 --dport 5167 -j ACCEPT',
'-A INPUT -p tcp -m tcp -s 172.30.2.166 --dport 80 -j ACCEPT',
'-A INPUT -p tcp -m tcp -s 172.30.2.166 --dport 5167 -j ACCEPT']
custom_rules: [ '-A INPUT -p tcp -m tcp -s {{ backend_ips[0] }} --dport 80 -j ACCEPT',
'-A INPUT -p tcp -m tcp -s {{ backend_ips[0] }} --dport 5167 -j ACCEPT',
'-A INPUT -p tcp -m tcp -s {{ backend_ips[1] }} --dport 80 -j ACCEPT',
'-A INPUT -p tcp -m tcp -s {{ backend_ips[1] }} --dport 5167 -j ACCEPT']
datacenter: aws

11
inventory/group_vars/copr_keygen_dev_aws
View file

@ -1,12 +1,13 @@
---
copr_hostbase: copr-keygen-dev
tcp_ports: []
tcp_ports: [22]
# http + signd dest ports
custom_rules: [ '-A INPUT -p tcp -m tcp -s 54.174.143.212 --dport 80 -j ACCEPT',
'-A INPUT -p tcp -m tcp -s 54.174.143.212 --dport 5167 -j ACCEPT',
'-A INPUT -p tcp -m tcp -s 172.30.2.128 --dport 80 -j ACCEPT',
'-A INPUT -p tcp -m tcp -s 172.30.2.128 --dport 5167 -j ACCEPT']
custom_rules: [ '-A INPUT -p tcp -m tcp -s {{ backend_ips[0] }} --dport 80 -j ACCEPT',
'-A INPUT -p tcp -m tcp -s {{ backend_ips[0] }} --dport 5167 -j ACCEPT',
'-A INPUT -p tcp -m tcp -s {{ backend_ips[1] }} --dport 80 -j ACCEPT',
'-A INPUT -p tcp -m tcp -s {{ backend_ips[1] }} --dport 5167 -j ACCEPT']
datacenter: aws

3
inventory/host_vars/copr-keygen-dev.aws.fedoraproject.org
View file

@ -17,9 +17,6 @@ root_auth_users: msuchy frostyx dturecek praiskup schlupov thrnciar
#volumes: [ {volume_id: '9e2b4c55-9ec3-4508-af46-a40f3a5bd982', device: '/dev/vdc'} ]
description: copr key gen and sign host - dev instance
# Copr vars
copr_hostbase: copr-keygen-dev
nagios_Check_Services:
mail: false
nrpe: false

3
inventory/host_vars/copr-keygen.aws.fedoraproject.org
View file

@ -16,9 +16,6 @@ public_ip: 52.202.64.55
root_auth_users: msuchy frostyx dturecek praiskup schlupov thrnciar
description: copr key gen and sign host - prod instance
# Copr vars
copr_hostbase: copr-keygen
nagios_Check_Services:
mail: false
nrpe: false