WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-05-12 02:46:20 +08:00
Code Issues Packages Projects Releases Wiki Activity

nftables / kojibuilder/rdu3: also allow proxy01/10.iad2 external ips for kojipkgs there, fix after move

Browse Source 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi
2025-06-24 12:17:42 -07:00
parent 327bf02f05
commit aa3e21cb89
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
roles/base/templates/nftables/nftables.kojibuilder
View File

@@ -105,6 +105,8 @@ add rule ip filter OUTPUT ip daddr 10.16.163.35 tcp dport 443 counter accept
# temp allow external iad2 infra until after the move
add rule ip filter OUTPUT ip daddr 38.145.60.16 tcp dport 80 counter accept
add rule ip filter OUTPUT ip daddr 38.145.60.16 tcp dport 443 counter accept
add rule ip filter OUTPUT ip daddr 38.145.60.20 tcp dport 443 counter accept
add rule ip filter OUTPUT ip daddr 38.145.60.21 tcp dport 443 counter accept
# rsyslog out to log01
add rule ip filter OUTPUT ip daddr 10.16.163.39 tcp dport 514 counter accept