From cf0fb98e4d87dd0c06ce92cf0d2d2dfcd6d4766c Mon Sep 17 00:00:00 2001 From: Timotej Lazar <timotej.lazar@fri.uni-lj.si> Date: Tue, 6 May 2025 13:17:41 +0200 Subject: [PATCH] firewall: drop a space --- roles/firewall/templates/nftables.nft.j2 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/roles/firewall/templates/nftables.nft.j2 b/roles/firewall/templates/nftables.nft.j2 index bff0c10..5afa559 100644 --- a/roles/firewall/templates/nftables.nft.j2 +++ b/roles/firewall/templates/nftables.nft.j2 @@ -74,7 +74,7 @@ table inet filter { # allow SSH connections from firewall master’s IPs {% for iface in hostvars[master].interfaces %} {% for address in iface.ip_addresses %} - tcp dport ssh {{ 'ip' if address.family.value == 4 else 'ip6' }} saddr {{ address.address | ipaddr('address') }} accept + tcp dport ssh {{ 'ip' if address.family.value == 4 else 'ip6' }} saddr {{ address.address | ipaddr('address') }} accept {% for nat_address in address.nat_outside %} tcp dport ssh ip saddr {{ nat_address.address | ipaddr('address') }} accept {% endfor %}