feat(security): added nftables firewall

2023-12-12 00:00:00 +00:00 · 2023-12-12 00:00:00 +00:00 · 639b01c351
commit 639b01c351
parent 7e617bc471
9 changed files with 211 additions and 0 deletions
--- a/inventory/host_vars/unobtainium/vars.yml
+++ b/inventory/host_vars/unobtainium/vars.yml
@ -21,3 +21,14 @@ custom_common:
    force_sign: true
    signing_key: "{{ vault_common_gitconfig_signingkey }}"
  install_fonts: true
+
+custom_security:
+  firewall:
+    filter:
+      policy:
+        output: accept
+        forward: accept
+    mangle:
+      drop_privatenets: false
+      policy:
+        forward: accept