From 5345216b12b936da1332bd13875d5b2d7acdde16 Mon Sep 17 00:00:00 2001 From: unkin-agent Date: Wed, 14 Oct 2026 22:21:33 +1100 Subject: [PATCH] Allow ssh from the 172.18.30-31.0/24 dmz vpcs --- hieradata/roles/infra/mail/gateway.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/hieradata/roles/infra/mail/gateway.yaml b/hieradata/roles/infra/mail/gateway.yaml index 4fb88e8..5b6677a 100644 --- a/hieradata/roles/infra/mail/gateway.yaml +++ b/hieradata/roles/infra/mail/gateway.yaml @@ -8,7 +8,7 @@ exporters::node_exporter::enable: false # ssh only from the edge vpcs (syd, mel) and the lab over the vpn route ssh::server::options: - AllowUsers: '*@198.18.30.0/24 *@198.18.31.0/24 *@198.18.0.0/16 *@10.10.12.200/32' + AllowUsers: '*@172.18.30.0/24 *@172.18.31.0/24 *@198.18.0.0/16 *@10.10.12.200/32' # local caching resolver for postfix and rspamd, forwarding to the lab resolver over the vpn route dnsmasq::no_resolv: true