Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

os-proxies don't do keepalive anymore

Browse source 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
This commit is contained in:
Patrick Uiterwijk 2019-05-16 12:02:59 +02:00
parent 377d73b75e
commit a2acf45321
2 changed files with 3 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

10
inventory/group_vars/os-proxies
View file

@ -9,16 +9,10 @@ tcp_ports: [
# For os routers # For os routers
80, 80,
443, 443,
# For haproxy status
8080,
# For ks8 api # For ks8 api
6443, 6443,
# For machinectl api # For machinectl api
22623, 22623,
# 9941 is closed generally, is for the inbound fedmsg and is covered in
# custom_rules
]
custom_rules: [
# Needed for keepalived
'-A INPUT -d 224.0.0.0/8 -j ACCEPT',
'-A INPUT -p vrrp -j ACCEPT',
] ]

2
playbooks/groups/os-proxies.yml
View file

@ -18,12 +18,12 @@
roles: roles:
- base - base
- basessh
- fas_client - fas_client
- rkhunter - rkhunter
- nagios_client - nagios_client
- collectd/base - collectd/base
- sudo - sudo
- keepalived
tasks: tasks:
- import_tasks: "{{ tasks_path }}/2fa_client.yml" - import_tasks: "{{ tasks_path }}/2fa_client.yml"