communishift: Add keepalived iptables rules, and fix interface name in config

Signed-off-by: Kevin Fenzi <kevin@scrye.com>

inventory/group_vars/os-proxies

@@ -15,3 +15,9 @@ tcp_ports: [
     # 9941 is closed generally, is for the inbound fedmsg and is covered in
     # custom_rules
 ]
+
+custom_rules: [
+    # Needed for keepalived
+    '-A INPUT -d 224.0.0.0/8 -j ACCEPT',
+    '-A INPUT -p vrrp -j ACCEPT',
+]

roles/keepalived/templates/keepalived.conf.j2

@@ -31,7 +31,7 @@ vrrp_instance VI_1 {
 }
 
 {% if keepalived2_ipaddress %}
-vrrp_instance VI_1 {
+vrrp_instance VI_2 {
   # initial state
   state MASTER
   interface {{ keepalived2_interface }}