diff --git a/cookbooks/firewall/templates/host-database/iptables-filter.erb b/cookbooks/firewall/templates/host-database/iptables-filter.erb index d474b54..68775b7 100644 --- a/cookbooks/firewall/templates/host-database/iptables-filter.erb +++ b/cookbooks/firewall/templates/host-database/iptables-filter.erb @@ -2,6 +2,7 @@ # Allow access to PostgreSQL -A INPUT -s <%= node['peers']['integration'] %> -p tcp -m state --state NEW --dport 5432 -j ACCEPT -A INPUT -s <%= node['peers']['social'] %> -p tcp -m state --state NEW --dport 5432 -j ACCEPT +-A INPUT -s <%= node['peers']['mezuro'] %> -p tcp -m state --state NEW --dport 5432 -j ACCEPT # Allow access to Redis -A INPUT -s <%= node['peers']['integration'] %> -p tcp -m state --state NEW --dport 6379 -j ACCEPT diff --git a/cookbooks/firewall/templates/host-mezuro/iptables-filter.erb b/cookbooks/firewall/templates/host-mezuro/iptables-filter.erb new file mode 100644 index 0000000..24f520a --- /dev/null +++ b/cookbooks/firewall/templates/host-mezuro/iptables-filter.erb @@ -0,0 +1,2 @@ +# Allow mezuro connect to HTTP +-A INPUT -s <%= node['peers']['integration'] %> -p tcp -m state --state NEW -m multiport --dports 8082 -j ACCEPT diff --git a/cookbooks/firewall/templates/host-mezuro/iptables-nat.erb b/cookbooks/firewall/templates/host-mezuro/iptables-nat.erb new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/cookbooks/firewall/templates/host-mezuro/iptables-nat.erb -- libgit2 0.21.2