Skip to content

Instantly share code, notes, and snippets.

@toanctruong

toanctruong/firewall.sls Secret

Created March 2, 2016 05:24
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save toanctruong/61c7a7e9976fa7355f8c to your computer and use it in GitHub Desktop.
Save toanctruong/61c7a7e9976fa7355f8c to your computer and use it in GitHub Desktop.
Download ZIP
Raw
firewall.sls
firewall:
install: True
enabled: True
strict: True
services:
ssh:
block_nomatch: True
ips_allow:
- 0.0.0.0/0
{% if grains['id'] == 'api*' %}
8443:
block_nomatch: True
ips_allow:
- 0.0.0.0/0
protos:
- tcp
8910:
block_nomatch: True
ips_allow:
- 0.0.0.0/0
protos:
- tcp
8080:
block_nomatch: True
ips_allow:
- 0.0.0.0/0
protos:
- tcp
8081:
block_nomatch: True
ips_allow:
- 0.0.0.0/0
protos:
- tcp
8082:
block_nomatch: True
ips_allow:
- 0.0.0.0/0
protos:
- tcp
{% elif grains['id'] == 'consul*' %}
8300:
block_nomatch: True
ips_allow:
- 0.0.0.0/0
protos:
- tcp
8301:
block_nomatch: True
ips_allow:
- 0.0.0.0/0
protos:
- tcp
- udp
{% endif %}
8400:
block_nomatch: True
ips_allow:
- 0.0.0.0/0
protos:
- tcp
8500:
block_nomatch: True
ips_allow:
- 0.0.0.0/0
protos:
- tcp
8600:
block_nomatch: True
ips_allow:
- 0.0.0.0/0
protos:
- tcp
- udp
9001:
block_nomatch: True
ips_allow:
- 0.0.0.0/0
protos:
- tcp
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment