rc/network
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

firewall: drop a space

Browse source
This commit is contained in:
Timotej Lazar 2025-05-06 13:17:41 +02:00
parent 899d7122f5
commit cf0fb98e4d
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
roles/firewall/templates/nftables.nft.j2
View file

@ -74,7 +74,7 @@ table inet filter {
# allow SSH connections from firewall master’s IPs # allow SSH connections from firewall master’s IPs
{% for iface in hostvars[master].interfaces %} {% for iface in hostvars[master].interfaces %}
{% for address in iface.ip_addresses %} {% for address in iface.ip_addresses %}
tcp dport ssh {{ 'ip' if address.family.value == 4 else 'ip6' }} saddr {{ address.address | ipaddr('address') }} accept tcp dport ssh {{ 'ip' if address.family.value == 4 else 'ip6' }} saddr {{ address.address | ipaddr('address') }} accept
{% for nat_address in address.nat_outside %} {% for nat_address in address.nat_outside %}
tcp dport ssh ip saddr {{ nat_address.address | ipaddr('address') }} accept tcp dport ssh ip saddr {{ nat_address.address | ipaddr('address') }} accept
{% endfor %} {% endfor %}