Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Turn nftables on everywhere.

Browse source 
Signed-off-by: James Antill <james@and.org>
This commit is contained in:
James Antill 2025-04-24 16:02:27 -04:00 • committed by james
parent 98c1a60c21
commit 68cbd3dc2c
2 changed files with 1 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
inventory/group_vars/all
View file

@ -150,7 +150,7 @@ nagios_Check_Services:
swap: true swap: true
nat_rules: [] nat_rules: []
# Do we want to use nftables instead of iptables # Do we want to use nftables instead of iptables
nftables: false nftables: True
# nftables variants of custom*_rules # nftables variants of custom*_rules
nft_custom6_rules: [] nft_custom6_rules: []
nft_custom_rules: [] nft_custom_rules: []

2
inventory/group_vars/builders
View file

@ -12,6 +12,4 @@ nagios_Check_Services:
mail: false mail: false
nrpe: false nrpe: false
swap: false swap: false
# Move from iptables to nftables for all builders in prod...
nftables: True
primary_auth_source: ipa primary_auth_source: ipa