antoine/visio_nrd
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge remote-tracking branch 'origin/master' into 1-ajout-stats-jvb

Browse Source
This commit is contained in:
Julien Fastré
2020-04-07 16:03:15 +02:00
parent 69197ee491 430a089615
commit b7f99ca8d4
6 changed files with 10 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
inventory
+1 -2
View File
@@ -1,7 +1,6 @@
visio.imio.be visio.imio.be
visio.nereide.fr visio.nereide.fr
visio2.nereide.fr visio2.nereide.fr ansible_ssh_user=root jitsi_user=nereide jitsi_pass=ofbiz
visio.entrouvert.com visio.entrouvert.com
visio443.champs-libres.be
pp.visio.nereide.fr ansible_ssh_user=root jitsi_user=toto jitsi_pass=titi pp.visio.nereide.fr ansible_ssh_user=root jitsi_user=toto jitsi_pass=titi
visio443.champs-libres.be ansible_user=debian ansible_become=true ansible_python_interpreter=/usr/bin/python3 visio443.champs-libres.be ansible_user=debian ansible_become=true ansible_python_interpreter=/usr/bin/python3
playbook.yml
+1 -1
View File
@@ -1,5 +1,5 @@
--- ---
- hosts: pp.visio.nereide.fr - hosts: visio2.nereide.fr
roles: roles:
- role: common - role: common
- role: auth - role: auth
roles/common/files/nftables.conf
+3
View File
@@ -28,6 +28,9 @@ table inet myfilter {
ip6 saddr { fe80::/10, fc00::/7 } drop ip6 saddr { fe80::/10, fc00::/7 } drop
# accepte le traffic tcp depuis le reste du monde si la cible est un des ports http, https, smtp # accepte le traffic tcp depuis le reste du monde si la cible est un des ports http, https, smtp
tcp dport {25, 80, 443} accept tcp dport {25, 80, 443} accept
# ouvre les port udp I/O 10000 et 44446 pour jitsi
udp dport {10000, 4446} accept
udp sport {10000, 4446} accept
# count and drop any other traffic # count and drop any other traffic
counter drop counter drop
roles/common/handlers/main.yml
+2 -2
View File
@@ -6,8 +6,8 @@
daemon_reload: true daemon_reload: true
enabled: true enabled: true
- name: reload nftables - name: start nftables
systemd: systemd:
name: nftables name: nftables
state: reload state: started
enabled: true enabled: true
roles/common/tasks/jitsi_install.yml
+1 -1
View File
@@ -9,7 +9,7 @@
- name: Ajout de la clé GPG pour le depot jitsi - name: Ajout de la clé GPG pour le depot jitsi
apt_key: apt_key:
url: https://download.jitsi.org/jitsi-key.gpg.key url: http://download.jitsi.org/jitsi-key.gpg.key
- name: Ajout du depot jitsi - name: Ajout du depot jitsi
apt_repository: apt_repository:
roles/common/tasks/sys_conf.yml
+2 -3
View File
@@ -19,8 +19,6 @@
template: template:
src: ../files/service-override.conf src: ../files/service-override.conf
dest: /etc/systemd/system/fail2ban.service.d/override.conf dest: /etc/systemd/system/fail2ban.service.d/override.conf
notify:
- restart fail2ban
- name: Déploiement des règles nftables (base) - name: Déploiement des règles nftables (base)
tags: tags:
@@ -29,4 +27,5 @@
src: ../files/nftables.conf src: ../files/nftables.conf
dest: /etc/nftables.conf dest: /etc/nftables.conf
notify: notify:
- reload nftables - start nftables
- restart fail2ban