WoodSmellParticle/ansible-infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(security,common)!: moved sysctl and resolvconf tasks from common to security role to fix DNS resolution fail due to firewall rules

Browse source
This commit is contained in:
NaeiKinDus 2024-08-08 00:00:00 +00:00
parent b7ba39bce9
commit 3701ea6276
Signed by: WoodSmellParticle
GPG key ID: 8E52ADFF7CA8AE56
13 changed files with 57 additions and 55 deletions
Download patch file Download diff file Expand all files Collapse all files

1
inventory/group_vars/external/vars.yml vendored
View file

@ -2,3 +2,4 @@
security_firewall_mangle_drop_privatenets: false
global_dns_domainname: "{{ vault_global_dns_domainname }}"
external_provisioner_source_ips: '{{ vault_external_provisioner_source_ips }}'
security_configure_resolve_conf: true

2
inventory/host_vars/unobtainium/vars.yml
View file

@ -12,7 +12,7 @@ common_git_email: "{{ vault_common_gitconfig_email }}"
common_git_force_sign: true
common_git_signing_key: "{{ vault_common_gitconfig_signingkey }}"
common_install_fonts: true
common_sysctl_configuration:
security_sysctl_configuration:
'fs.inotify.max_user_watches': 1048576
'vm.swappiness': 1

2
inventory/host_vars/unsepttrium/vars.yml
View file

@ -11,7 +11,7 @@ common_git_email: "{{ vault_common_gitconfig_email }}"
common_git_force_sign: true
common_git_signing_key: "{{ vault_common_gitconfig_signingkey }}"
common_install_fonts: true
common_sysctl_configuration:
security_sysctl_configuration:
'fs.inotify.max_user_watches': 1048576
'vm.swappiness': 1