From 018732929a9cb8fa6794e95be01edb8be2939336 Mon Sep 17 00:00:00 2001 From: unkin-agent Date: Tue, 13 Oct 2026 21:29:22 +1100 Subject: [PATCH] Renumber the edge VPCs in the sshd allow list --- hieradata/roles/infra/mail/gateway.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/hieradata/roles/infra/mail/gateway.yaml b/hieradata/roles/infra/mail/gateway.yaml index 0136d7a..4fb88e8 100644 --- a/hieradata/roles/infra/mail/gateway.yaml +++ b/hieradata/roles/infra/mail/gateway.yaml @@ -8,7 +8,7 @@ exporters::node_exporter::enable: false # ssh only from the edge vpcs (syd, mel) and the lab over the vpn route ssh::server::options: - AllowUsers: '*@10.10.14.0/24 *@10.10.15.0/24 *@198.18.0.0/16 *@10.10.12.200/32' + AllowUsers: '*@198.18.30.0/24 *@198.18.31.0/24 *@198.18.0.0/16 *@10.10.12.200/32' # local caching resolver for postfix and rspamd, forwarding to the lab resolver over the vpn route dnsmasq::no_resolv: true