talexander/machine_setup
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Update firewall for unifi controller virtual machine.

Browse Source
This commit is contained in:
Tom Alexander 2023-01-16 17:05:47 -05:00
parent 8b25b3397f
commit 3734f2126c
Signed by: talexander
GPG Key ID: D3A179C9A53C0EDE
2 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
ansible/roles/build/tasks/linux.yaml
View File

@ -7,8 +7,9 @@
- name: Install packages - name: Install packages
pacman: pacman:
name: name:
- base-devel
- gnupg - gnupg
- devtools - devtools # Creates /usr/share/devtools/makepkg-x86_64.conf and provides mkarchroot
- base-devel - base-devel
- vifm - vifm
- vim - vim
@ -89,7 +90,7 @@
dest: /etc/pacman.d/conf.d/ dest: /etc/pacman.d/conf.d/
- src: pacman-custom.conf - src: pacman-custom.conf
dest: /etc/aurutils/ dest: /etc/aurutils/
- src: makepkg.conf - src: makepkg.conf # TODO: Is this needed or can I use the default from devtools?
dest: /etc/aurutils/ dest: /etc/aurutils/
- name: Create custom repo db - name: Create custom repo db

5
ansible/roles/firewall/files/homeserver_pf.conf
View File

@ -7,6 +7,7 @@ allow = "{ wgh wgf }"
tcp_pass_in = "{ 22 }" tcp_pass_in = "{ 22 }"
udp_pass_in = "{ 53 51820 }" udp_pass_in = "{ 53 51820 }"
unifi_ports = "{ 8443 3478 10001 8080 1900 8843 8880 6789 5514 }"
# Rules must be in order: options, normalization, queueing, translation, filtering # Rules must be in order: options, normalization, queueing, translation, filtering
@ -23,6 +24,10 @@ rdr pass on host_uplink1 inet proto {tcp, udp} from any to 10.213.177.1 port 53
nat pass on host_uplink0 inet proto tcp from any to any port 8081 tag ALLOWED -> (host_uplink0) nat pass on host_uplink0 inet proto tcp from any to any port 8081 tag ALLOWED -> (host_uplink0)
rdr pass on $ext_if inet proto tcp from any to any port 8081 tag ALLOWED -> 10.193.223.20 port 8081 rdr pass on $ext_if inet proto tcp from any to any port 8081 tag ALLOWED -> 10.193.223.20 port 8081
# Forward ports for unifi controller
rdr pass on $ext_if inet proto tcp from any to any port 65022 tag ALLOWED -> 10.213.177.8 port 22
rdr pass on $ext_if inet proto {udp, tcp} from any to any port $unifi_ports tag ALLOWED -> 10.213.177.8
# filtering # filtering
block log all block log all
pass out on $ext_if pass out on $ext_if