From 7a3fe8254df2313dd2e0405f65eb0267d7e29458 Mon Sep 17 00:00:00 2001 From: Christoph Date: Thu, 12 Nov 2026 12:26:42 +0100 Subject: [PATCH] Role ipt-server: migrate first group of 12 hosts. server23/26/27.warenform.de, git, o12, o22, o27, o31, o42, cl-exil, cl-opp, web-09.oopen.de. Co-Authored-By: Claude Opus 5.5 --- host_vars/backup.oopen.de/backup-ipt-server.yml | 4 ++++ host_vars/cl-exil.oopen.de/cl-exil-ipt-server.yml | 2 +- host_vars/cl-opp.oopen.de/cl-opp-ipt-server.yml | 2 +- host_vars/git.oopen.de/git-ipt-server.yml | 2 +- host_vars/o12.oopen.de/o12-ipt-server.yml | 2 +- host_vars/o22.oopen.de/o22-ipt-server.yml | 2 +- host_vars/o27.oopen.de/o27-ipt-server.yml | 2 +- host_vars/o31.oopen.de/o31-ipt-server.yml | 2 +- host_vars/o42.oopen.de/o42-ipt-server.yml | 2 +- host_vars/server23.warenform.de/server23-ipt-server.yml | 2 +- host_vars/server26.warenform.de/server26-ipt-server.yml | 2 +- host_vars/server27.warenform.de/server27-ipt-server.yml | 2 +- host_vars/web-09.oopen.de/web-09-ipt-server.yml | 2 +- 13 files changed, 16 insertions(+), 12 deletions(-) diff --git a/host_vars/backup.oopen.de/backup-ipt-server.yml b/host_vars/backup.oopen.de/backup-ipt-server.yml index 90f0f3a..dc34138 100644 --- a/host_vars/backup.oopen.de/backup-ipt-server.yml +++ b/host_vars/backup.oopen.de/backup-ipt-server.yml @@ -23,6 +23,10 @@ fw_allow_ext_service_v4: "138.201.17.150:1036:tcp o32.oopen.de:2222:tcp" # --- Access control IPv6 fw_allow_ext_service_v6: "2a01:4f8:171:2895::2,1036,tcp o32.oopen.de,2222,tcp" +# --- SSH +fw_ssh_ports: "$standard_ssh_port 2222" +fw_ssh_ports_v6: "$standard_ssh_port" + # --- HTTP fw_http_server_ips: $ext_ips diff --git a/host_vars/cl-exil.oopen.de/cl-exil-ipt-server.yml b/host_vars/cl-exil.oopen.de/cl-exil-ipt-server.yml index 62ea251..ffe8a75 100644 --- a/host_vars/cl-exil.oopen.de/cl-exil-ipt-server.yml +++ b/host_vars/cl-exil.oopen.de/cl-exil-ipt-server.yml @@ -3,7 +3,7 @@ # Generated by extract-fw-host-vars.py - review before committing! # Place in: host_vars//-ipt-server.yml -fw_manage_config: false +fw_manage_config: true # --- Network fw_ext_interfaces: diff --git a/host_vars/cl-opp.oopen.de/cl-opp-ipt-server.yml b/host_vars/cl-opp.oopen.de/cl-opp-ipt-server.yml index d913b7b..994e944 100644 --- a/host_vars/cl-opp.oopen.de/cl-opp-ipt-server.yml +++ b/host_vars/cl-opp.oopen.de/cl-opp-ipt-server.yml @@ -3,7 +3,7 @@ # Generated by extract-fw-host-vars.py - review before committing! # Place in: host_vars//-ipt-server.yml -fw_manage_config: false +fw_manage_config: true # --- Network fw_ext_interfaces: diff --git a/host_vars/git.oopen.de/git-ipt-server.yml b/host_vars/git.oopen.de/git-ipt-server.yml index c7e9763..0aedeac 100644 --- a/host_vars/git.oopen.de/git-ipt-server.yml +++ b/host_vars/git.oopen.de/git-ipt-server.yml @@ -3,7 +3,7 @@ # Generated by extract-fw-host-vars.py - review before committing! # Place in: host_vars//-ipt-server.yml -fw_manage_config: false +fw_manage_config: true # --- Network fw_ext_interfaces: diff --git a/host_vars/o12.oopen.de/o12-ipt-server.yml b/host_vars/o12.oopen.de/o12-ipt-server.yml index 4e539a5..c2e9ac2 100644 --- a/host_vars/o12.oopen.de/o12-ipt-server.yml +++ b/host_vars/o12.oopen.de/o12-ipt-server.yml @@ -3,7 +3,7 @@ # Generated by extract-fw-host-vars.py - review before committing! # Place in: host_vars//-ipt-server.yml -fw_manage_config: false +fw_manage_config: true # --- Network fw_ext_interfaces: diff --git a/host_vars/o22.oopen.de/o22-ipt-server.yml b/host_vars/o22.oopen.de/o22-ipt-server.yml index c9658fa..68b2981 100644 --- a/host_vars/o22.oopen.de/o22-ipt-server.yml +++ b/host_vars/o22.oopen.de/o22-ipt-server.yml @@ -3,7 +3,7 @@ # Generated by extract-fw-host-vars.py - review before committing! # Place in: host_vars//-ipt-server.yml -fw_manage_config: false +fw_manage_config: true # --- Network fw_ext_interfaces: diff --git a/host_vars/o27.oopen.de/o27-ipt-server.yml b/host_vars/o27.oopen.de/o27-ipt-server.yml index 2dfb4ad..7fd27e1 100644 --- a/host_vars/o27.oopen.de/o27-ipt-server.yml +++ b/host_vars/o27.oopen.de/o27-ipt-server.yml @@ -3,7 +3,7 @@ # Generated by extract-fw-host-vars.py - review before committing! # Place in: host_vars//-ipt-server.yml -fw_manage_config: false +fw_manage_config: true # --- Network fw_ext_interfaces: diff --git a/host_vars/o31.oopen.de/o31-ipt-server.yml b/host_vars/o31.oopen.de/o31-ipt-server.yml index b714b19..45511cb 100644 --- a/host_vars/o31.oopen.de/o31-ipt-server.yml +++ b/host_vars/o31.oopen.de/o31-ipt-server.yml @@ -3,7 +3,7 @@ # Generated by extract-fw-host-vars.py - review before committing! # Place in: host_vars//-ipt-server.yml -fw_manage_config: false +fw_manage_config: true # --- Network fw_ext_interfaces: diff --git a/host_vars/o42.oopen.de/o42-ipt-server.yml b/host_vars/o42.oopen.de/o42-ipt-server.yml index c4e8369..670701c 100644 --- a/host_vars/o42.oopen.de/o42-ipt-server.yml +++ b/host_vars/o42.oopen.de/o42-ipt-server.yml @@ -3,7 +3,7 @@ # Generated by extract-fw-host-vars.py - review before committing! # Place in: host_vars//-ipt-server.yml -fw_manage_config: false +fw_manage_config: true # --- Network fw_ext_interfaces: diff --git a/host_vars/server23.warenform.de/server23-ipt-server.yml b/host_vars/server23.warenform.de/server23-ipt-server.yml index ef09c9e..9285e28 100644 --- a/host_vars/server23.warenform.de/server23-ipt-server.yml +++ b/host_vars/server23.warenform.de/server23-ipt-server.yml @@ -3,7 +3,7 @@ # Generated by extract-fw-host-vars.py - review before committing! # Place in: host_vars//-ipt-server.yml -fw_manage_config: false +fw_manage_config: true # --- Network fw_ext_interfaces: diff --git a/host_vars/server26.warenform.de/server26-ipt-server.yml b/host_vars/server26.warenform.de/server26-ipt-server.yml index a5ce7e7..304f950 100644 --- a/host_vars/server26.warenform.de/server26-ipt-server.yml +++ b/host_vars/server26.warenform.de/server26-ipt-server.yml @@ -3,7 +3,7 @@ # Generated by extract-fw-host-vars.py - review before committing! # Place in: host_vars//-ipt-server.yml -fw_manage_config: false +fw_manage_config: true # --- Network fw_ext_interfaces: diff --git a/host_vars/server27.warenform.de/server27-ipt-server.yml b/host_vars/server27.warenform.de/server27-ipt-server.yml index cfcce31..f340ba1 100644 --- a/host_vars/server27.warenform.de/server27-ipt-server.yml +++ b/host_vars/server27.warenform.de/server27-ipt-server.yml @@ -3,7 +3,7 @@ # Generated by extract-fw-host-vars.py - review before committing! # Place in: host_vars//-ipt-server.yml -fw_manage_config: false +fw_manage_config: true # --- Network fw_ext_interfaces: diff --git a/host_vars/web-09.oopen.de/web-09-ipt-server.yml b/host_vars/web-09.oopen.de/web-09-ipt-server.yml index 17ac1a8..49f4c34 100644 --- a/host_vars/web-09.oopen.de/web-09-ipt-server.yml +++ b/host_vars/web-09.oopen.de/web-09-ipt-server.yml @@ -3,7 +3,7 @@ # Generated by extract-fw-host-vars.py - review before committing! # Place in: host_vars//-ipt-server.yml -fw_manage_config: false +fw_manage_config: true # --- Network fw_ext_interfaces: