rc/servers
2
0
Fork 0
Code Issues Pull requests Actions Packages Projects 1 Releases Wiki Activity

alpine: don’t hardcode nftables input rule for SSH

Browse source 
Instead configure it in NetBox like all other services.
This commit is contained in:
Timotej Lazar 2024-08-14 12:46:23 +02:00
parent 38ff061f81
commit 3261bc7f98
1 changed files with 0 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
roles/alpine/templates/local.nft.j2
View file

@ -1,7 +1,5 @@
table inet filter { table inet filter {
chain input { chain input {
tcp dport ssh accept
{% for service in services %} {% for service in services %}
{% set prefixes = service | allowed_prefixes %} {% set prefixes = service | allowed_prefixes %}
{% set ports = service.ports | compact_numlist %} {% set ports = service.ports | compact_numlist %}