ansible-debops-infrastructure

Unnamed repository; edit this file 'description' to name the repository.
git clone git://git.erethon.com/ansible-debops-infrastructure
Log | Files | Refs

commit c545cdf5df0e1e2297c4a646b9d5a0a271ea4ac9
parent 0b2d81cea6f8e6dcfa2904408fd2cf2c5273e81d
Author: Dionysis Grigoropoulos <dgrig@erethon.com>
Date:   Sun, 22 Jul 2018 23:09:50 +0300

ferm: Open port for node_exporter from prom host

Diffstat:
ansible/inventory/group_vars/all/ferm.yml | 11+++++++++++
1 file changed, 11 insertions(+), 0 deletions(-)

diff --git a/ansible/inventory/group_vars/all/ferm.yml b/ansible/inventory/group_vars/all/ferm.yml @@ -4,3 +4,14 @@ ferm__enabled: True ferm__filter_icmp: False ferm__filter_syn: False ferm__filter_recent: False + +ferm__group_rules: + - name: 'node_exporter' + type: 'accept' + filename: 'node_exporter' + table: 'filter' + chain: 'INPUT' + dport: [ 9100 ] + saddr: "{{ hostvars['prometheus_host'].ansible_host }}" + protocol: 'tcp' + domain: 'ip'