Files
fedora-infra_ansible/inventory/group_vars/os_proxies
2025-01-16 11:28:24 -05:00

25 lines
656 B
Plaintext

---
custom_rules: [
# Needed for keepalived
'-A INPUT -d 224.0.0.0/8 -j ACCEPT', '-A INPUT -p vrrp -j ACCEPT',
# machinectl api
'-A INPUT -p tcp --dport 22623 --src 38.145.48.0/27 -j ACCEPT']
nft_custom_rules:
# Needed for keepalived
- 'add rule ip filter INPUT ip daddr 224.0.0.0/8 counter accept'
- 'add rule ip filter INPUT ip protocol vrrp counter accept'
# machinectl api
- 'add rule ip filter INPUT ip saddr 38.145.48.0/27 tcp dport 22623 counter accept'
datacenter: cloud
host_group: cloud
lvm_size: 20000
mem_size: 8192
num_cpus: 4
tcp_ports: [
# For os routers
80, 443,
# For ks8 api
6443,
# For haproxy status
8080]