Adapt base classes for the mail edge gateway

2026-10-12 22:38:45 +11:00
parent 05c1176cdc
commit 8c722c36db
2 changed files with 87 additions and 71 deletions
@@ -1,7 +1,20 @@
 ---
+lookup_options:
+  ssh::server::options:
+    merge:
+      strategy: deep
+
 hiera_include:
  - redis

+# no consul datacentre at the edge, so nothing to register or scrape via consul
+profiles::consul::client::enable: false
+exporters::node_exporter::enable: false
+
+# ssh only from the vpc and the lab over the vpn route
+ssh::server::options:
+  AllowUsers: '*@10.0.0.0/8 *@172.16.0.0/12 *@192.168.0.0/16 *@198.18.0.0/16'
+
 # local caching resolver for postfix and rspamd, forwarding to the lab resolver over the vpn route
 dnsmasq::no_resolv: true
 dnsmasq::cache_size: 10000