FAQ | This is a LIVE service | Changelog

Skip to content
Snippets Groups Projects
Commit ea4c35bf authored by Sam Wenham's avatar Sam Wenham
Browse files

Stop setting main host firewall policy in the docker role

parent 7905b642
No related branches found
No related tags found
1 merge request!38Stop setting main host firewall policy in the docker role
Pipeline #10548 passed
......@@ -12,14 +12,14 @@
action: insert
chain: INPUT
protocol: tcp
destination_port: 2377
destination_port: "2377"
jump: ACCEPT
when: ansible_os_family != "Debian"
- name: UFW Allow TCP 2377 for cluster management
ufw:
rule: allow
port: 2377
port: "2377"
proto: tcp
when: ansible_os_family == "Debian"
......@@ -28,14 +28,14 @@
action: insert
chain: INPUT
protocol: tcp
destination_port: 7946
destination_port: "7946"
jump: ACCEPT
when: ansible_os_family != "Debian"
- name: UFW Allow TCP 7946 for inter-node communication
ufw:
rule: allow
port: 7946
port: "7946"
proto: tcp
when: ansible_os_family == "Debian"
......@@ -44,14 +44,14 @@
action: insert
chain: INPUT
protocol: udp
destination_port: 7946
destination_port: "7946"
jump: ACCEPT
when: ansible_os_family != "Debian"
- name: UFW Allow UDP 7946 for inter-node communication
ufw:
rule: allow
port: 7946
port: "7946"
proto: udp
when: ansible_os_family == "Debian"
......@@ -60,14 +60,14 @@
action: insert
chain: INPUT
protocol: udp
destination_port: 4789
destination_port: "4789"
jump: ACCEPT
when: ansible_os_family != "Debian"
- name: UFW Allow UDP 4789 for overlay network traffic
ufw:
rule: allow
port: 4789
port: "4789"
proto: udp
when: ansible_os_family == "Debian"
......@@ -76,13 +76,6 @@
action: insert
chain: INPUT
protocol: udp
destination_port: 4789
destination_port: "4789"
jump: ACCEPT
when: ansible_os_family != "Debian"
- name: UFW Enable deny policy
ufw:
state: enabled
policy: deny
direction: incoming
when: ansible_os_family == "Debian"
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment