RWejlgaard/pez-infra
1
0
Fork 0
mirror of https://github.com/RWejlgaard/pez-infra.git synced 2026-05-06 04:14:43 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
pez-infra/ansible/inventory/host_vars
History
Rasmus Wejlgaard 339c08c5c2 Configure UFW firewall rules in common Ansible role 
Add UFW configuration to the common role for Debian hosts:
- Default deny incoming, allow outgoing
- Allow all traffic on tailscale0 interface (mesh comms)
- Allow SSH port 22 as safety net
- Per-host allowed ports via ufw_allowed_ports variable
- Enable UFW after rules are applied

helsinki-a gets ports 80/443 for reverse proxy traffic.
Other Debian hosts only need Tailscale + SSH.

Closes PESO-79
2026-03-29 09:07:42 +00:00
..
copenhagen-a.yml initial commit 2026-03-28 12:39:41 +00:00
copenhagen-c.yml initial commit 2026-03-28 12:39:41 +00:00
helsinki-a.yml Configure UFW firewall rules in common Ansible role 2026-03-29 09:07:42 +00:00
london-a.yml initial commit 2026-03-28 12:39:41 +00:00
london-b.yml fix: move authelia, forgejo, bitwarden to helsinki-a host_vars (#8) 2026-03-28 22:08:16 +00:00
nuremberg-a.yml Configure UFW firewall rules in common Ansible role 2026-03-29 09:07:42 +00:00