From b4a09a7b9450804a4d3d5718a4397b9a3a3302ce Mon Sep 17 00:00:00 2001
From: Christoph <ckubu@oopen.de>
Date: Sun, 9 Aug 2026 23:14:08 +0200
Subject: [PATCH] feat(ipt-firewall): add ipt-firewall configuration for
 mm-irights, mm-nd, and mm-rav hosts

---
 .../mm-irights-ipt-server.yml                 | 24 +++++++++++++++++++
 host_vars/mm-nd.oopen.de/mm-nd-ipt-server.yml | 24 +++++++++++++++++++
 .../mm-rav.oopen.de/mm-rav-ipt-server.yml     | 24 +++++++++++++++++++
 3 files changed, 72 insertions(+)
 create mode 100644 host_vars/mm-irights.oopen.de/mm-irights-ipt-server.yml
 create mode 100644 host_vars/mm-nd.oopen.de/mm-nd-ipt-server.yml
 create mode 100644 host_vars/mm-rav.oopen.de/mm-rav-ipt-server.yml

diff --git a/host_vars/mm-irights.oopen.de/mm-irights-ipt-server.yml b/host_vars/mm-irights.oopen.de/mm-irights-ipt-server.yml
new file mode 100644
index 0000000..db2b802
--- /dev/null
+++ b/host_vars/mm-irights.oopen.de/mm-irights-ipt-server.yml
@@ -0,0 +1,24 @@
+---
+# ipt-firewall configuration for a.ns.oopen.de
+# Generated by extract-fw-host-vars.py - review before committing!
+# Place in: host_vars/<hostname>/ipt_firewall.yml
+
+fw_manage_config: true
+
+# --- Network
+fw_ext_interfaces:
+  - "eth0"
+fw_ext_ips_v4:
+  - "157.90.140.169"
+fw_ext_ips_v6:
+  - "2a01:4f8:2220:37c3::169"
+
+# --- Munin
+munin_remote_ipv4: 37.27.121.227
+munin_remote_ipv6: "2a01:4f9:3070:2bda::227"
+
+# --- HTTP
+fw_http_server_ips: $ext_1_ip
+
+# --- Mail
+fw_mail_client_ips: $ext_1_ip
diff --git a/host_vars/mm-nd.oopen.de/mm-nd-ipt-server.yml b/host_vars/mm-nd.oopen.de/mm-nd-ipt-server.yml
new file mode 100644
index 0000000..ceb4941
--- /dev/null
+++ b/host_vars/mm-nd.oopen.de/mm-nd-ipt-server.yml
@@ -0,0 +1,24 @@
+---
+# ipt-firewall configuration for a.ns.oopen.de
+# Generated by extract-fw-host-vars.py - review before committing!
+# Place in: host_vars/<hostname>/ipt_firewall.yml
+
+fw_manage_config: true
+
+# --- Network
+fw_ext_interfaces:
+  - "eth0"
+fw_ext_ips_v4:
+  - "135.181.239.139"
+fw_ext_ips_v6:
+  - "2a01:4f9:3080:3d2d::139"
+
+# --- Munin
+munin_remote_ipv4: 37.27.121.227
+munin_remote_ipv6: "2a01:4f9:3070:2bda::227"
+
+# --- HTTP
+fw_http_server_ips: $ext_1_ip
+
+# --- Mail
+fw_mail_client_ips: $ext_1_ip
diff --git a/host_vars/mm-rav.oopen.de/mm-rav-ipt-server.yml b/host_vars/mm-rav.oopen.de/mm-rav-ipt-server.yml
new file mode 100644
index 0000000..0b09d92
--- /dev/null
+++ b/host_vars/mm-rav.oopen.de/mm-rav-ipt-server.yml
@@ -0,0 +1,24 @@
+---
+# ipt-firewall configuration for a.ns.oopen.de
+# Generated by extract-fw-host-vars.py - review before committing!
+# Place in: host_vars/<hostname>/ipt_firewall.yml
+
+fw_manage_config: true
+
+# --- Network
+fw_ext_interfaces:
+  - "eth0"
+fw_ext_ips_v4:
+  - "95.217.194.17"
+fw_ext_ips_v6:
+  - "2a01:4f9:4a:5114::17"
+
+# --- Munin
+munin_remote_ipv4: 37.27.121.227
+munin_remote_ipv6: "2a01:4f9:3070:2bda::227"
+
+# --- HTTP
+fw_http_server_ips: $ext_1_ip
+
+# --- Mail
+fw_mail_client_ips: $ext_1_ip