ansible/oopen-server
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
396 Commits 1 Branch 0 Tags
a0e573f1aef0d786649bfe9c1beee3b998ab6a33
Commit Graph
3 Commits
Author SHA1 Message Date
chrisandClaude Opus 5.5 1838f63bec Role ipt-server: migrate piwik.warenform.de. 
host_vars follow the current config on the host: add fw_mail_client_ips,
drop fw_blocked_ips_v4 (empty on the host). IPv4 rules unchanged; the old
IPv6 firewall had aborted halfway (policy ACCEPT), it is now complete.
Second run changed=0.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-11 18:59:34 +01:00
chrisandClaude Opus 5.5 02990faf70 Role ipt-server: configurable rate for the new-TCP-connection limit; new defaults. 
- Sync ipt-firewall-server, ip6t-firewall-server and default_settings.conf
  with firewall/ipt-server affa35d: new limit_new_tcp_connections_per_seconds_rate
  (default 30, burst twice the rate); the rule now only drops SYNs above the
  limit instead of accepting those below it; several IPv6 fixes.
- defaults: fw_limit_new_tcp_connections_per_seconds_per_source_IP: false,
  fw_limit_new_tcp_connections_per_seconds_ports: "80,110,143,443,465,995",
  new fw_limit_new_tcp_connections_per_seconds_rate (overridable with _v6).
- templates, extract-fw-host-vars.py, README: new variable and defaults.
- oolm-shop: drop fw_limit_new_tcp_connections_per_seconds_per_source_IP_v6
  (it would have enabled the limit for IPv6 with the new default ports).
- piwik: fw_manage_config: true, per_IP_connection_limit 501, no
  new-connection limit.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-11 18:51:16 +01:00
chrisandClaude Opus 5.5 3a73ed9583 Inventory cleanup; add ipt-server host_vars for all ipt hosts. 
- hosts: remove unreachable/decommissioned hosts (file-ah-neu, file-ah-alt,
  file-km-neu, ga-al-gw-neu, gw-opp-neu, zapata-neu, zapata-alt, bbb-server,
  ki-fm, server28, ...) and duplicate aliases (etherpad = b.ns,
  cl-irights-neu = cl-irights, oolm-db = o21, devel-ruby = devel-todo).
- host_vars: add <short>-ipt-server.yml (fw_manage_config: false) for all
  hosts running the ipt-server firewall, generated by extract-fw-host-vars.py.
- host_vars: move/remove obsolete host directories, replace alias
  directories by symlinks (cl-lubax -> o32, cl-vbrg -> o34, oolm-db -> o21).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-03 23:08:58 +01:00