fscotto/infra
1
0
Fork 0
mirror of https://github.com/fscotto/infra.git synced 2026-09-28 03:03:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore(aegis): remove local TLS configuration

Browse Source
This commit is contained in:
Fabio Scotto di Santolo
2026-09-05 16:28:22 +02:00
parent f07391c404
commit e47e435421
5 changed files with 50 additions and 44 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
ansible/roles/profile_aegis/tasks/main.yml
View File

@@ -135,6 +135,15 @@
loop_control:
label: "{{ item }}"
- name: Remove retired Aegis TLS access rule
tags: [aegis, firewall]
ansible.posix.firewalld:
rich_rule: 'rule family="ipv4" source address="{{ aegis_lan_subnet }}" port port="853" protocol="tcp" accept'
permanent: true
immediate: true
state: disabled
zone: "{{ aegis_firewalld_zone }}"
- name: Allow Aegis services from the LAN only
tags: [aegis, firewall]
ansible.posix.firewalld:
@@ -146,7 +155,6 @@
loop:
- 'rule family="ipv4" source address="{{ aegis_lan_subnet }}" service name="ssh" accept'
- 'rule family="ipv4" source address="{{ aegis_lan_subnet }}" service name="dns" accept'
- 'rule family="ipv4" source address="{{ aegis_lan_subnet }}" port port="853" protocol="tcp" accept'
- 'rule family="ipv4" source address="{{ aegis_lan_subnet }}" service name="aegis-adguard-web" accept'
loop_control:
label: "{{ item }}"