deploy/firewall-settings.typical at main · open-contracting/deploy · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
# Configure this file using the set_firewall macro. Do not edit this file.
# If this file must be edited, see the instructions in firewall/init.sls.

VERBOSE="true"

# Paths to executables and files.
IPCMD="/sbin/ip"
IFCONFIG="/sbin/ifconfig"
IPTABLES="/sbin/iptables"
IP6TABLES="/sbin/ip6tables"

# IPs from which to allow ANY connection. FOR TESTING ONLY.
ALLOWALL_IPV4=""
ALLOWALL_IPV6=""

# IPs from which to deny ANY connection. For vexatious IPs.
DENYALL_IPV4=""
DENYALL_IPV6=""

# IPs from which to allow SSH collections.
SSH_IPV4=""
SSH_IPV6=""

# The IPs of the Prometheus server.
PROMETHEUS_IPV4="139.162.253.17"
PROMETHEUS_IPV6="2a01:7e00::f03c:93ff:fe13:a12c 2a01:7e00:e000:4e0::/64"

# The IPs of replica servers.
REPLICA_IPV4=""
REPLICA_IPV6=""

MONITOR_APPBEAT=""
MONITOR_PINGDOM=""

PUBLIC_HTTP="yes"
PUBLIC_HTTPS="yes"

PUBLIC_SSH=""

PUBLIC_TINYPROXY=""

PUBLIC_ELASTICSEARCH=""

PUBLIC_POSTGRESQL=""
PRIVATE_POSTGRESQL=""

# Allows connections from the Prometheus server on port 7231.
PRIVATE_PROMETHEUS_CLIENT="yes"
DOCKER="true"