chore: updated firewall ips

4 years ago · c1c1d34101
parent 1b9ef67edc
commit c1c1d34101
4 changed files with 65 additions and 18 deletions
--- a/roles/hcloud/templates/firewall-awx.json.j2
+++ b/roles/hcloud/templates/firewall-awx.json.j2
@ -8,11 +8,7 @@
      "protocol": "tcp",
      "port": "32000",
      "source_ips": [
-        "149.233.6.129/32",
-        "212.121.131.106/32",
-        "79.215.1.110/32",
-        "212.86.56.112/32",
-        "159.69.46.214/32"
+        "159.69.46.214/32",
      ],
      "destination_ips": [
      ]
--- a/roles/hcloud/templates/firewall-default.json.j2
+++ b/roles/hcloud/templates/firewall-default.json.j2
@ -20,10 +20,10 @@
      "port": "22",
      "source_ips": [
        "149.233.6.129/32",
-        "212.121.131.106/32",
        "162.55.214.230/32",
-        "79.215.1.110/32",
-        "212.86.56.112/32"
+        "212.121.131.106/32",
+        "212.86.56.112/32",
+        "87.141.83.195/32"
      ],
      "destination_ips": [
      ]
@ -34,10 +34,10 @@
      "port": "80",
      "source_ips": [
        "149.233.6.129/32",
-        "212.121.131.106/32",
        "162.55.214.230/32",
-        "79.215.1.110/32",
-        "212.86.56.112/32"
+        "212.121.131.106/32",
+        "212.86.56.112/32",
+        "87.141.83.195/32"
      ],
      "destination_ips": [
      ]
@ -48,10 +48,10 @@
      "port": "443",
      "source_ips": [
        "149.233.6.129/32",
-        "212.121.131.106/32",
        "162.55.214.230/32",
-        "79.215.1.110/32",
-        "212.86.56.112/32"
+        "212.121.131.106/32",
+        "212.86.56.112/32",
+        "87.141.83.195/32"
      ],
      "destination_ips": [
      ]
--- a/roles/hcloud/templates/firewall-kibana.json.j2
+++ b/roles/hcloud/templates/firewall-kibana.json.j2
@ -10,8 +10,31 @@
      "source_ips": [
        "149.233.6.129/32",
        "212.121.131.106/32",
-        "79.215.1.110/32",
-        "212.86.56.112/32"
+        "87.141.83.195/32"
+      ],
+      "destination_ips": [
+      ]
+    },
+    {
+      "direction": "in",
+      "protocol": "tcp",
+      "port": "9200",
+      "source_ips": [
+        "149.233.6.129/32",
+        "212.121.131.106/32",
+        "87.141.83.195/32"
+      ],
+      "destination_ips": [
+      ]
+    },
+    {
+      "direction": "in",
+      "protocol": "tcp",
+      "port": "9300",
+      "source_ips": [
+        "149.233.6.129/32",
+        "212.121.131.106/32",
+        "87.141.83.195/32"
      ],
      "destination_ips": [
      ]
--- a/roles/hcloud/templates/firewall-monitoring.json.j2
+++ b/roles/hcloud/templates/firewall-monitoring.json.j2
@ -10,8 +10,22 @@
      "source_ips": [
        "149.233.6.129/32",
        "212.121.131.106/32",
-        "79.215.1.110/32",
        "212.86.56.112/32",
+        "87.141.83.195/32",
+        "94.130.97.253/32"
+      ],
+      "destination_ips": [
+      ]
+    },
+    {
+      "direction": "in",
+      "protocol": "tcp",
+      "port": "9001",
+      "source_ips": [
+        "149.233.6.129/32",
+        "212.121.131.106/32",
+        "212.86.56.112/32",
+        "87.141.83.195/32",
        "94.130.97.253/32"
      ],
      "destination_ips": [
@ -24,8 +38,22 @@
      "source_ips": [
        "149.233.6.129/32",
        "212.121.131.106/32",
-        "79.215.1.110/32",
        "212.86.56.112/32",
+        "87.141.83.195/32",
+        "94.130.97.253/32"
+      ],
+      "destination_ips": [
+      ]
+    },
+    {
+      "direction": "in",
+      "protocol": "tcp",
+      "port": "80",
+      "source_ips": [
+        "149.233.6.129/32",
+        "212.121.131.106/32",
+        "212.86.56.112/32",
+        "87.141.83.195/32",
        "94.130.97.253/32"
      ],
      "destination_ips": [