From fff295759c8fbf4b87e158e6e0b565f83d46c335 Mon Sep 17 00:00:00 2001 From: Christoph Date: Sun, 9 Aug 2026 00:35:36 +0200 Subject: [PATCH] feat(o45): add ipt-firewall configuration for a.mx.oopen.de --- host_vars/o45.oopen.de/o45-ipt-server.yml | 36 +++++++++++++++++++++++ 1 file changed, 36 insertions(+) create mode 100644 host_vars/o45.oopen.de/o45-ipt-server.yml diff --git a/host_vars/o45.oopen.de/o45-ipt-server.yml b/host_vars/o45.oopen.de/o45-ipt-server.yml new file mode 100644 index 0000000..159d480 --- /dev/null +++ b/host_vars/o45.oopen.de/o45-ipt-server.yml @@ -0,0 +1,36 @@ +--- +# ipt-firewall configuration for a.mx.oopen.de +# Generated by extract-fw-host-vars.py - review before committing! +# Place in: host_vars//ipt_firewall.yml + +fw_manage_config: true + +# --- Network +fw_ext_interfaces: + - "br0" +fw_ext_ips_v4: + - "135.181.239.145" +fw_ext_ips_v6: + - "2a01:4f9:3080:3d2d::2" + +fw_lxc_guest_ips_v4: + - "95.216.231.188" + - "135.181.239.139" + - "135.181.239.144" +fw_lxc_guest_ips_v6: + - "2a01:4f9:3080:3d2d::139" + - "2a01:4f9:3080:3d2d::144" + - "a01:4f9:3080:3d2d::188" + +# --- Munin +munin_remote_ipv4: 37.27.121.227 +munin_remote_ipv6: "2a01:4f9:3070:2bda::227" + +# --- Bridged / LXC +fw_do_not_firewall_bridged_traffic: true +fw_do_not_firewall_lx_guest_systems: true + +# --- Forwarding +fw_kernel_activate_forwarding: true +fw_kernel_forward_between_interfaces: true +