WoodSmellParticle/ansible-infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refactor(security): reworked firewall configuration and added support for DNS, HTTP and ICMP rules; added autoconf for resolv.conf to match FW rules

Browse source
This commit is contained in:
NaeiKinDus 2024-01-06 00:00:00 +00:00
parent 3a7440f570
commit da45c7c409
Signed by: WoodSmellParticle
GPG key ID: 8E52ADFF7CA8AE56
22 changed files with 169 additions and 48 deletions
Download patch file Download diff file Expand all files Collapse all files

8
playbooks/external.yml
View file

@ -2,15 +2,13 @@
- name: setup external infrastructure
hosts: external
gather_facts: false
vars_files: ../inventory/vault.yml
tasks:
- include_vars: ../inventory/vault.yml
- name: include common role
ansible.builtin.include_role:
name: nullified.infrastructure.common
- name: include security role
ansible.builtin.include_role:
name: nullified.infrastructure.security
- name: include common role
ansible.builtin.include_role:
name: nullified.infrastructure.common
- name: setup servers
hosts: external:&server

8
playbooks/internal.yml
View file

@ -2,15 +2,13 @@
- name: setup internal infrastructure
hosts: internal
gather_facts: false
vars_files: ../inventory/vault.yml
tasks:
- include_vars: ../inventory/vault.yml
- name: include common role
ansible.builtin.include_role:
name: nullified.infrastructure.common
- name: include security role
ansible.builtin.include_role:
name: nullified.infrastructure.security
- name: include common role
ansible.builtin.include_role:
name: nullified.infrastructure.common
- name: setup servers
hosts: internal:&server