Turn nftables on everywhere.

Signed-off-by: James Antill <james@and.org>
2026-04-26 03:23:08 +08:00 · 2025-04-24 16:02:27 -04:00
parent 98c1a60c21
commit 68cbd3dc2c
2 changed files with 1 additions and 3 deletions
--- a/inventory/group_vars/all
+++ b/inventory/group_vars/all
@@ -150,7 +150,7 @@ nagios_Check_Services:
  swap: true
 nat_rules: []
 # Do we want to use nftables instead of iptables
-nftables: false
+nftables: True
 # nftables variants of custom*_rules
 nft_custom6_rules: []
 nft_custom_rules: []
--- a/inventory/group_vars/builders
+++ b/inventory/group_vars/builders
@@ -12,6 +12,4 @@ nagios_Check_Services:
  mail: false
  nrpe: false
  swap: false
-# Move from iptables to nftables for all builders in prod...
-nftables: True
 primary_auth_source: ipa