unkin/puppet-prod
4
0
Fork 0
Code Issues 15 Pull Requests 3 Actions Packages Projects Releases Wiki Activity

pin prodnxsr0020 sshd to localhost and dum0
ci/woodpecker/pr/puppet-lint Pipeline was successful
Details
ci/woodpecker/pr/ruby-validate Pipeline was successful
Details
ci/woodpecker/pr/yamllint Pipeline was successful
Details
ci/woodpecker/pr/bolt-validate Pipeline was successful
Details
ci/woodpecker/pr/erb-validate Pipeline was successful
Details
ci/woodpecker/pr/epp-validate Pipeline was successful
Details
ci/woodpecker/pr/ruby-check Pipeline was canceled
Details
ci/woodpecker/pr/puppet-validate Pipeline was canceled
Details

Browse Source
This commit is contained in:
Unkin Agent
2026-10-03 20:44:56 +10:00
parent 4a7d509943
commit f4f4a12b52
1 changed files with 9 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
hieradata/nodes/prodnxsr0020.main.unkin.net.yaml
+9 -3
View File
@@ -18,11 +18,17 @@ profiles::dns::updater::deny_ranges:
- 103.216.190.0/23 # wan uplink
profiles::consul::client::host_addr: "%{hiera('networking_loopback0_ip')}"
# ssh: keep listening on all addresses
# ssh: listen on localhost and dum0 only; knock out the common wan primary ip
lookup_options:
ssh::server::options:
merge:
strategy: deep
knockout_prefix: '--'
ssh::server::options:
ListenAddress:
- '0.0.0.0'
- '::'
- "--%{facts.networking.ip}"
- 127.0.0.1
- "%{hiera('networking_loopback0_ip')}"
# frrouting
frrouting::ospfd_router_id: "%{hiera('networking_loopback0_ip')}"