CCCHH/ansible-infra
CCCHH/ansible-infra
3
2
Fork 1
Code Issues 18 Pull requests 9 Wiki Activity Actions

z9-router(host): add firewall rule chaosknoten to z9 pbs
Some checks failed
/ build (push) Successful in 26s
Details
/ Ansible Lint (push) Failing after 2m20s
Details

Browse source
This commit is contained in:
bitwhisker 2026-08-09 17:32:36 +02:00
commit 938a913094
Signed by: bitwhisker
SSH key fingerprint: SHA256:KybIk/tusSKao6eLGY+ILlFa1rCrzwx66/acBAcKUqE
1 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
resources/z9/z9-router/nftables/nftables.conf
View file

@ -113,6 +113,8 @@ table inet forward {
# Fux PVE backups
ip6 saddr { 2a07:c481:0:1::/64 } ip6 daddr { 2a07:c481:1:36::15/128 } accept comment "allow Fux PVE to access CCCHH PBS"
# chaosknoten PVE backups
ip6 saddr { 2a00:14b0:4200:3000::126:1/128 } ip6 daddr { 2a07:c481:1:36::15/128 } accept comment "allow chaosknoten PVE to access CCCHH PBS"
# staubi and staubiv2 to club-assistant
ip saddr { 10.89.212.232/32, 10.89.212.233/32 } ip daddr { 10.89.213.22/32 } accept comment "allow staubi and staubiv2 to club-assistant"