Ben Vincent
b9465cd78b
- create classes for each class of in/out traffic - use hier_include to add firewall rules to each role
82 lines
1.9 KiB
YAML
82 lines
1.9 KiB
YAML
---
|
|
hiera_include:
|
|
- firewall::rules::in::dhcp
|
|
- firewall::rules::in::sshd
|
|
|
|
profiles::dhcp::server::ntpservers:
|
|
- ntp01.main.unkin.net
|
|
- ntp02.main.unkin.net
|
|
profiles::dhcp::server::interfaces:
|
|
- eth0
|
|
profiles::dhcp::server::default_lease_time: 1200
|
|
profiles::dhcp::server::globaloptions:
|
|
- 'arch code 93 = unsigned integer 16'
|
|
|
|
profiles::dhcp::server::pools:
|
|
syd1-prod:
|
|
network: 198.18.15.0
|
|
mask: 255.255.255.0
|
|
range:
|
|
- '198.18.15.200 198.18.15.220'
|
|
gateway: 198.18.15.254
|
|
nameservers:
|
|
- 198.18.13.12
|
|
- 198.18.13.13
|
|
domain_name: main.unkin.net
|
|
pxeserver: 198.18.13.27
|
|
syd1-test:
|
|
network: 198.18.16.0
|
|
mask: 255.255.255.0
|
|
range:
|
|
- '198.18.16.200 198.18.16.220'
|
|
gateway: 198.18.16.254
|
|
nameservers:
|
|
- 198.18.13.12
|
|
- 198.18.13.13
|
|
domain_name: main.unkin.net
|
|
pxeserver: 198.18.13.27
|
|
syd1-prod1:
|
|
network: 198.18.13.0
|
|
mask: 255.255.255.0
|
|
range:
|
|
- '198.18.13.200 198.18.13.220'
|
|
gateway: 198.18.13.254
|
|
nameservers:
|
|
- 198.18.13.12
|
|
- 198.18.13.13
|
|
domain_name: main.unkin.net
|
|
pxeserver: 198.18.13.27
|
|
syd1-prod2:
|
|
network: 198.18.14.0
|
|
mask: 255.255.255.0
|
|
range:
|
|
- '198.18.14.200 198.18.14.220'
|
|
gateway: 198.18.14.254
|
|
nameservers:
|
|
- 198.18.13.12
|
|
- 198.18.13.13
|
|
domain_name: main.unkin.net
|
|
pxeserver: 198.18.13.27
|
|
drw1-prod:
|
|
network: 198.18.17.0
|
|
mask: 255.255.255.0
|
|
range:
|
|
- '198.18.17.200 198.18.17.220'
|
|
gateway: 198.18.17.1
|
|
nameservers:
|
|
- 198.18.17.7
|
|
- 198.18.17.8
|
|
domain_name: main.unkin.net
|
|
pxeserver: 198.18.13.27
|
|
|
|
# UFI 64-bit
|
|
profiles::dhcp::server::classes:
|
|
UEFI-64:
|
|
parameters:
|
|
- 'match if option arch = 00:07 or option arch = 00:09'
|
|
- 'filename "/ipxe.efi"'
|
|
Legacy:
|
|
parameters:
|
|
- 'match if option arch = 00:00'
|
|
- 'filename "/undionly.kpxe"'
|