From 3bb2a5dbad9aeb80fd8680a2fca31cae66a15adc Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Sat, 28 Jun 2025 17:04:25 +1000
Subject: [PATCH] fix: enable health check from haproxy2 (#324)

- tactical fix: enable dmz subnets container access to health url

Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/324
---
 hieradata/roles/apps/media.yaml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/hieradata/roles/apps/media.yaml b/hieradata/roles/apps/media.yaml
index a46745d..76277a7 100644
--- a/hieradata/roles/apps/media.yaml
+++ b/hieradata/roles/apps/media.yaml
@@ -69,8 +69,7 @@ profiles::nginx::simpleproxy::locations:
     location_allow:
       - 127.0.0.1
       - "%{facts.networking.ip}"
-      - 198.18.13.25
-      - 198.18.13.26
+      - 198.18.24.0/24
     location_deny:
       - all
   # authorised access from external