WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-03-20 03:57:02 +08:00
Code Issues Packages Projects Releases Wiki Activity

allow log01 to get logs from proxies and other hosts. fix both iptables and rsyncd

Browse Source
This commit is contained in:
Stephen Smoogen
2020-06-12 11:01:08 -04:00
parent dc92c9d924
commit f65a48aa61
22 changed files with 55 additions and 59 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
roles/rsyncd/files/rsyncd.conf.default
View File

@@ -13,4 +13,4 @@ path = /var/log
uid = root
gid = root
read only = yes
hosts allow = 10.5.126.13 192.168.1.59 10.3.163.39
hosts allow = 192.168.1.59 10.3.163.39

2
roles/rsyncd/files/rsyncd.conf.people01.fedoraproject.org
View File

@@ -13,7 +13,7 @@ path = /var/log
uid = root
gid = root
read only = yes
hosts allow = 10.5.126.13 192.168.1.59
hosts allow = 10.3.163.39 192.168.1.59
[people-repos]
comment = repos.fedorapeople.org content

54
roles/rsyncd/files/rsyncd.conf.sundries
View File

@@ -12,7 +12,7 @@ path = /var/log
uid = root
gid = root
read only = yes
hosts allow = 10.5.126.13 192.168.1.59 10.3.163.39
hosts allow = 10.3.163.39 192.168.1.59
[docs-old]
comment = Old Docs Site
@@ -20,7 +20,7 @@ path = /srv/web/docs-old
uid = root
gid = root
read only = yes
hosts allow = 10.5.126.0/255.255.255.0 192.168.0.0/255.255.0.0 10.5.128.0/255.255.255.0 10.3.160.0/255.255.224.0
hosts allow = 10.3.160.0/255.255.224.0
[docs]
comment = Docs Site
@@ -28,7 +28,7 @@ path = /srv/docs
uid = root
gid = root
read only = yes
hosts allow = 10.5.126.0/255.255.255.0 192.168.0.0/255.255.0.0 10.5.128.0/255.255.255.0 10.3.160.0/255.255.224.0
hosts allow = 10.3.160.0/255.255.224.0
[membership-map]
comment = Ambassadors Membership Map
@@ -36,7 +36,7 @@ path = /srv/web/membership-map
uid = root
gid = root
read only = yes
hosts allow = 10.5.126.0/255.255.255.0 192.168.0.0/255.255.0.0 10.5.128.0/255.255.255.0 10.3.160.0/255.255.224.0
hosts allow = 10.3.160.0/255.255.224.0
[review-stats]
comment = Package Review Stats
@@ -44,7 +44,7 @@ path = /srv/web/review-stats
uid = root
gid = root
read only = yes
hosts allow = 10.5.126.0/255.255.255.0 192.168.0.0/255.255.0.0 10.5.128.0/255.255.255.0 10.3.160.0/255.255.224.0
hosts allow = 10.3.160.0/255.255.224.0
[gather-easyfix]
comment = Gather easyfix available in Fedora
@@ -52,7 +52,7 @@ path = /srv/web/easyfix
uid = root
gid = root
read only = yes
hosts allow = 10.5.126.0/255.255.255.0 192.168.0.0/255.255.0.0 10.5.128.0/255.255.255.0 10.3.160.0/255.255.224.0
hosts allow = 10.3.160.0/255.255.224.0
[fedoraproject.org]
comment = fedoraproject.org
@@ -60,7 +60,7 @@ path = /srv/web/fedoraproject.org
uid = root
gid = root
read only = yes
hosts allow = 10.5.126.0/255.255.255.0 192.168.0.0/255.255.0.0 10.5.128.0/255.255.255.0 10.3.160.0/255.255.224.0
hosts allow = 10.3.160.0/255.255.224.0
[spins.fedoraproject.org]
comment = spins.fedoraproject.org
@@ -68,7 +68,7 @@ path = /srv/web/spins.fedoraproject.org
uid = root
gid = root
read only = yes
hosts allow = 10.5.126.0/255.255.255.0 192.168.0.0/255.255.0.0 10.5.128.0/255.255.255.0 10.3.160.0/255.255.224.0
hosts allow = 10.3.160.0/255.255.224.0
[talk.fedoraproject.org]
comment = talk.fedoraproject.org
@@ -76,7 +76,7 @@ path = /srv/web/talk.fedoraproject.org
uid = root
gid = root
read only = yes
hosts allow = 10.5.126.0/255.255.255.0 192.168.0.0/255.255.0.0 10.5.128.0/255.255.255.0 10.3.160.0/255.255.224.0
hosts allow = 10.3.160.0/255.255.224.0
[start.fedoraproject.org]
comment = start.fedoraproject.org
@@ -84,7 +84,7 @@ path = /srv/web/start.fedoraproject.org
uid = root
gid = root
read only = yes
hosts allow = 10.5.126.0/255.255.255.0 192.168.0.0/255.255.0.0 10.5.128.0/255.255.255.0 10.3.160.0/255.255.224.0
hosts allow = 10.3.160.0/255.255.224.0
[mirrors.fedoraproject.org]
comment = mirrors.fedoraproject.org
@@ -92,7 +92,7 @@ path = /srv/web/mirrors.fedoraproject.org
uid = root
gid = root
read only = yes
hosts allow = 10.5.126.0/255.255.255.0 192.168.0.0/255.255.0.0 10.5.128.0/255.255.255.0 10.3.160.0/255.255.224.0
hosts allow = 10.3.160.0/255.255.224.0
[fedoracommunity.org]
comment = fedoracommunity.org
@@ -100,7 +100,7 @@ path = /srv/web/fedoracommunity.org
uid = root
gid = root
read only = yes
hosts allow = 10.5.126.0/255.255.255.0 192.168.0.0/255.255.0.0 10.5.128.0/255.255.255.0 10.3.160.0/255.255.224.0
hosts allow = 10.3.160.0/255.255.224.0
[fudcon.fedoraproject.org]
comment = fudcon.fedoraproject.org
@@ -108,7 +108,7 @@ path = /srv/web/fudcon.fedoraproject.org
uid = root
gid = root
read only = yes
hosts allow = 10.5.126.0/255.255.255.0 192.168.0.0/255.255.0.0 10.5.128.0/255.255.255.0 10.3.160.0/255.255.224.0
hosts allow = 10.3.160.0/255.255.224.0
[flocktofedora.org]
comment = flocktofedora.org
@@ -116,7 +116,7 @@ path = /srv/web/flocktofedora.org
uid = root
gid = root
read only = yes
hosts allow = 10.5.126.0/255.255.255.0 192.168.0.0/255.255.0.0 10.5.128.0/255.255.255.0 10.3.160.0/255.255.224.0
hosts allow = 10.3.160.0/255.255.224.0
[getfedora.org]
comment = getfedora.org
@@ -124,7 +124,7 @@ path = /srv/websites/getfedora.org
uid = root
gid = root
read only = yes
hosts allow = 10.5.126.0/255.255.255.0 192.168.0.0/255.255.0.0 10.5.128.0/255.255.255.0 10.3.160.0/255.255.224.0
hosts allow = 10.3.160.0/255.255.224.0
[labs.fedoraproject.org]
comment = labs.fedoraproject.org
@@ -132,7 +132,7 @@ path = /srv/web/labs.fedoraproject.org
uid = root
gid = root
read only = yes
hosts allow = 10.5.126.0/255.255.255.0 192.168.0.0/255.255.0.0 10.5.128.0/255.255.255.0 10.3.160.0/255.255.224.0
hosts allow = 10.3.160.0/255.255.224.0
[budget.fedoraproject.org]
comment = budget.fedoraproject.org
@@ -140,7 +140,7 @@ path = /srv/web/budget.fedoraproject.org
uid = root
gid = root
read only = yes
hosts allow = 10.5.126.0/255.255.255.0 192.168.0.0/255.255.0.0 10.5.128.0/255.255.255.0 10.3.160.0/255.255.224.0
hosts allow = 10.3.160.0/255.255.224.0
[arm.fedoraproject.org]
comment = arm.fedoraproject.org
@@ -148,7 +148,7 @@ path = /srv/web/arm.fedoraproject.org
uid = root
gid = root
read only = yes
hosts allow = 10.5.126.0/255.255.255.0 192.168.0.0/255.255.0.0 10.5.128.0/255.255.255.0 10.3.160.0/255.255.224.0
hosts allow = 10.3.160.0/255.255.224.0
[iot.fedoraproject.org]
comment = iot.fedoraproject.org
@@ -156,7 +156,7 @@ path = /srv/web/iot.fedoraproject.org
uid = root
gid = root
read only = yes
hosts allow = 10.5.126.0/255.255.255.0 192.168.0.0/255.255.0.0 10.5.128.0/255.255.255.0 10.3.160.0/255.255.224.0
hosts allow = 10.3.160.0/255.255.224.0
[developer.fedoraproject.org]
comment = developer.fedoraproject.org
@@ -164,7 +164,7 @@ path = /srv/web/developer.fedoraproject.org
uid = root
gid = root
read only = yes
hosts allow = 10.5.126.0/255.255.255.0 192.168.0.0/255.255.0.0 10.5.128.0/255.255.255.0 10.3.160.0/255.255.224.0
hosts allow = 10.3.160.0/255.255.224.0
[codecs.fedoraproject.org]
comment = codecs.fedoraproject.org
@@ -172,7 +172,7 @@ path = /srv/web/codecs.fedoraproject.org
uid = root
gid = root
read only = yes
hosts allow = 10.5.126.0/255.255.255.0 192.168.0.0/255.255.0.0 10.5.128.0/255.255.255.0 10.3.160.0/255.255.224.0
hosts allow = 10.3.160.0/255.255.224.0
[alt.fedoraproject.org]
comment = alt.fedoraproject.org
@@ -180,7 +180,7 @@ path = /srv/web/alt.fedoraproject.org
uid = root
gid = root
read only = yes
hosts allow = 10.5.126.0/255.255.255.0 192.168.0.0/255.255.0.0 10.5.128.0/255.255.255.0 10.3.160.0/255.255.224.0
hosts allow = 10.3.160.0/255.255.224.0
[fmw]
comment = fmw
@@ -188,7 +188,7 @@ path = /srv/web/fmw
uid = root
gid = root
read only = yes
hosts allow = 10.5.126.0/255.255.255.0 192.168.0.0/255.255.0.0 10.5.128.0/255.255.255.0 10.3.160.0/255.255.224.0
hosts allow = 10.3.160.0/255.255.224.0
[registry-signatures]
comment = registry-signatures
@@ -196,7 +196,7 @@ path = /srv/web/registry-signatures
uid = root
gid = root
read only = yes
hosts allow = 10.5.126.0/255.255.255.0 192.168.0.0/255.255.0.0 10.5.128.0/255.255.255.0 10.3.160.0/255.255.224.0
hosts allow = 10.3.160.0/255.255.224.0
[registry-index]
comment = registry-index
@@ -204,7 +204,7 @@ path = /var/lib/reg-server/static/
uid = root
gid = root
read only = yes
hosts allow = 10.5.126.0/255.255.255.0 192.168.0.0/255.255.0.0 10.5.128.0/255.255.255.0 10.3.160.0/255.255.224.0
hosts allow = 10.3.160.0/255.255.224.0
[regindexer]
comment = regindexer
@@ -212,7 +212,7 @@ path = /var/lib/regindexer/
uid = root
gid = root
read only = yes
hosts allow = 10.5.126.0/255.255.255.0 192.168.0.0/255.255.0.0 10.5.128.0/255.255.255.0 10.3.160.0/255.255.224.0
hosts allow = 10.3.160.0/255.255.224.0
[docs-redirects]
comment = Docs Site Redirects
@@ -220,4 +220,4 @@ path = /srv/web/docs-redirects
uid = root
gid = root
read only = yes
hosts allow = 10.5.126.0/255.255.255.0 192.168.0.0/255.255.0.0 10.5.128.0/255.255.255.0 10.3.160.0/255.255.224.0
hosts allow = 10.3.160.0/255.255.224.0

2
roles/rsyncd/templates/rsyncd.conf.download.j2
View File

@@ -172,5 +172,5 @@ refuse options = checksum
uid = root
gid = root
read only = yes
hosts allow = 10.5.126.13
hosts allow = 10.3.163.39
list = no