include ferm::zivit
}
+ if (getfromhash($site::nodeinfo, 'hoster', 'name') == "aql") {
+ include ferm::aql
+ }
+
case $::hostname {
czerny,clementi: {
@ferm::rule { 'dsa-upsmon':
description => 'Allow syslog access',
rule => '&SERVICE_RANGE(tcp, 5140, $HOST_DEBIAN_V6)'
}
+ @ferm::rule { 'fastly-syslog':
+ description => 'Allow syslog access',
+ rule => '&SERVICE_RANGE(tcp, 5141, $HOST_FASTLY)'
+ }
}
kaufmann: {
@ferm::rule { 'dsa-hkp':
default: {}
}
- # elasticsearch stuff
- case $::hostname {
- stockhausen: {
- @ferm::rule { 'dsa-elasticsearch-bendel':
- domain => '(ip)',
- description => 'Allow elasticsearch access from bendel',
- rule => '&SERVICE_RANGE(tcp, 9200:9300, ( 82.195.75.100/32 ))'
- }
- @ferm::rule { 'dsa-elasticsearch-bendel6':
- domain => '(ip6)',
- description => 'Allow elasticsearch access from bendel',
- rule => '&SERVICE_RANGE(tcp, 9200:9300, ( 2001:41b8:202:deb:216:36ff:fe40:4002/128 ))'
- }
- }
- }
-
# postgres stuff
case $::hostname {
ullmann: {
@ferm::rule { 'dsa-postgres-bacula':
# dinis
description => 'Allow postgress access1',
- rule => '&SERVICE_RANGE(tcp, 5437, ( 5.153.231.19/32 ))'
+ rule => '&SERVICE_RANGE(tcp, 5437, ( 5.153.231.19/32 93.94.130.161/32 ))'
}
@ferm::rule { 'dsa-postgres-bacula6':
domain => 'ip6',
description => 'Allow postgress access1',
- rule => '&SERVICE_RANGE(tcp, 5437, ( 2001:41c8:1000:21::21:19/128 ))'
+ rule => '&SERVICE_RANGE(tcp, 5437, ( 2001:41c8:1000:21::21:19/128 2a02:158:380:280::161/128 ))'
}
@ferm::rule { 'dsa-postgres-backup':
rule => '&SERVICE_RANGE(tcp, 5439, ( 2001:1af8:4020:b030::/64 ))'
}
}
- melartin,vittoria: {
+ vittoria: {
@ferm::rule { 'dsa-postgres-backup':
description => 'Allow postgress access',
rule => '&SERVICE_RANGE(tcp, 5432, ( $HOST_PGBACKUPHOST_V4 ))'