Role ipt-server: migrate o34.oopen.de (fw_manage_config: true).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-11-03 01:21:03 +01:00
parent 3e6486c5b5
commit b585f3c122
1 changed files with 33 additions and 0 deletions
@@ -0,0 +1,33 @@
+---
+# ipt-firewall configuration for o34.oopen.de
+# Generated by extract-fw-host-vars.py - review before committing!
+# Place in: host_vars/<hostname>/<short-hostname>-ipt-server.yml
+
+fw_manage_config: true
+
+# --- Network
+fw_ext_interfaces:
+  - "enp6s0"
+fw_ext_ips_v4:
+  - "65.109.158.101"
+fw_ext_ips_v6:
+  - "2a01:4f9:3080:155d::2"
+
+# --- Munin
+munin_remote_ipv4: 37.27.121.227
+munin_remote_ipv6: "2a01:4f9:3070:2bda::227"
+
+# --- Bridged / LXC
+fw_do_not_firewall_bridged_traffic: true
+
+# --- HTTP
+fw_http_server_ips: $ext_1_ip
+
+# --- Mail
+fw_mail_client_ips: $ext_1_ip
+
+# --- FTP
+fw_ftp_server_ips: $ext_1_ip
+
+# --- Block
+fw_blocked_ips_v4: 222.184.0.0/13 61.160.0.0/16 116.8.0.0/14