Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Reroute 443 to 44342 for Zanata

Browse source 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
This commit is contained in:
Patrick Uiterwijk 2019-04-13 21:38:27 +02:00
parent 0af40df768
commit cbf5f95037
1 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
inventory/group_vars/proxies
View file

@ -65,6 +65,10 @@ custom_rules: [
'-A INPUT -p tcp -m tcp --dport 9941 -s 10.5.124.207 -j ACCEPT', '-A INPUT -p tcp -m tcp --dport 9941 -s 10.5.124.207 -j ACCEPT',
# Allow openqa01 to talk to the inbound fedmsg relay. # Allow openqa01 to talk to the inbound fedmsg relay.
'-A INPUT -p tcp -m tcp --dport 9941 -s 10.5.131.71 -j ACCEPT', '-A INPUT -p tcp -m tcp --dport 9941 -s 10.5.131.71 -j ACCEPT',
# For Zanata, redirect 443/tcp -> 43342/tcp for TLS reasons
# See files/httpd/website_id_fp_o_zanata.conf for info
'-t nat -A PREROUTING -s 209.132.183.252 -p tcp --dport 443 -j REDIRECT --to 44342'
] ]
blocked_ips: [ blocked_ips: [