feat: add firewall module

- add nftables/ipset modules - add custom firewall module
2024-11-03 02:24:06 +11:00
parent 09a448ea52
commit ce12303576
24 changed files with 292 additions and 2 deletions
@@ -1,4 +1,10 @@
 ---
+hiera_include:
+  - firewall::rules::in::ssh
+  - firewall::rules::in::vault
+
+firewall::rules::in::ssh::ipset: jumphost
+
 profiles::vault::server::members_role: roles::infra::storage::vault
 profiles::vault::server::members_lookup: true
 profiles::vault::server::data_dir: /data/vault