From b585f3c1227b68393932c52476df92b48f5adee1 Mon Sep 17 00:00:00 2001 From: Christoph Date: Tue, 3 Nov 2026 01:21:03 +0100 Subject: [PATCH] Role ipt-server: migrate o34.oopen.de (fw_manage_config: true). Co-Authored-By: Claude Opus 5.5 --- host_vars/o34.oopen.de/o34-ipt-server.yml | 33 +++++++++++++++++++++++ 1 file changed, 33 insertions(+) create mode 100644 host_vars/o34.oopen.de/o34-ipt-server.yml diff --git a/host_vars/o34.oopen.de/o34-ipt-server.yml b/host_vars/o34.oopen.de/o34-ipt-server.yml new file mode 100644 index 0000000..4a3723a --- /dev/null +++ b/host_vars/o34.oopen.de/o34-ipt-server.yml @@ -0,0 +1,33 @@ +--- +# ipt-firewall configuration for o34.oopen.de +# Generated by extract-fw-host-vars.py - review before committing! +# Place in: host_vars//-ipt-server.yml + +fw_manage_config: true + +# --- Network +fw_ext_interfaces: + - "enp6s0" +fw_ext_ips_v4: + - "65.109.158.101" +fw_ext_ips_v6: + - "2a01:4f9:3080:155d::2" + +# --- Munin +munin_remote_ipv4: 37.27.121.227 +munin_remote_ipv6: "2a01:4f9:3070:2bda::227" + +# --- Bridged / LXC +fw_do_not_firewall_bridged_traffic: true + +# --- HTTP +fw_http_server_ips: $ext_1_ip + +# --- Mail +fw_mail_client_ips: $ext_1_ip + +# --- FTP +fw_ftp_server_ips: $ext_1_ip + +# --- Block +fw_blocked_ips_v4: 222.184.0.0/13 61.160.0.0/16 116.8.0.0/14