13 lines
784 B
Django/Jinja
13 lines
784 B
Django/Jinja
{%- set api_source_ips = firewall_lb_ips | default({}, True) -%}
|
|
{%- set noop = api_source_ips.update(firewall_cluster_nodes_ips) -%}
|
|
table inet filter {
|
|
chain input {
|
|
{% if firewall_lb_ips %}ip saddr { {{ api_source_ips | join (', ') }} } {% endif %}tcp dport {{ hc_vault_api_port }} accept
|
|
{% if firewall_cluster_nodes_ips %}ip saddr { {{ firewall_cluster_nodes_ips | join(', ') }} } tcp dport {{ hc_vault_raft_cluster_port }}{% endif +%}
|
|
}
|
|
|
|
chain output {
|
|
{% if firewall_lb_ips %}ip daddr { {{ api_source_ips | join (', ') }} } {% endif %}tcp sport {{ hc_vault_api_port }} accept
|
|
{% if firewall_cluster_nodes_ips %}ip daddr { {{ firewall_cluster_nodes_ips | join(', ') }} } tcp sport {{ hc_vault_raft_cluster_port }}{% endif +%}
|
|
}
|
|
}
|