nimbus.prater: open REST API ports to the fleet

Allows for trusted node syncing through the VPN.

Signed-off-by: Jakub Sokołowski <jakub@status.im>
This commit is contained in:
Jakub Sokołowski 2022-08-16 18:01:55 +02:00
parent 79843f4c25
commit 7ec7641eed
No known key found for this signature in database
GPG Key ID: 09AA5403E54D9931
2 changed files with 8 additions and 0 deletions

View File

@ -43,6 +43,12 @@ beacon_node_service_user_pass: '{{lookup("bitwarden", "nimbus/windows", field="p
beacon_node_web3_urls: '{{ beacon_node_web3_urls_all }}' beacon_node_web3_urls: '{{ beacon_node_web3_urls_all }}'
beacon_node_web3_jwt_secret: '{{lookup("bitwarden", "nimbus/jwt-token")}}' beacon_node_web3_jwt_secret: '{{lookup("bitwarden", "nimbus/jwt-token")}}'
# Open Ports
open_ports_default_comment: 'Nimbus REST API'
open_ports_default_chain: 'VPN'
open_ports_list:
- { port: '9300:9310', ipset: '{{ env }}.{{ stage }}' }
# Split by hostname for more central location # Split by hostname for more central location
nodes_layout: nodes_layout:
# WARNING: The nodes hosted on AWS are bootstrap nodes and should not be changed. # WARNING: The nodes hosted on AWS are bootstrap nodes and should not be changed.

View File

@ -19,6 +19,7 @@
- nimbus-prater-testing - nimbus-prater-testing
- nimbus-prater-unstable - nimbus-prater-unstable
roles: roles:
- { role: open-ports, tags: open-ports }
- { role: get-geth-api-urls, tags: get-geth-api-urls } - { role: get-geth-api-urls, tags: get-geth-api-urls }
tasks: tasks:
- include_role: name=infra-role-beacon-node-linux - include_role: name=infra-role-beacon-node-linux
@ -33,6 +34,7 @@
serial: '{{ serial|default(1) }}' serial: '{{ serial|default(1) }}'
hosts: nimbus-prater-metal hosts: nimbus-prater-metal
roles: roles:
- { role: open-ports, tags: open-ports }
- { role: redirect-ports, tags: [ redirect-ports ] } - { role: redirect-ports, tags: [ redirect-ports ] }
- { role: get-geth-api-urls, tags: [ get-geth-api-urls ] } - { role: get-geth-api-urls, tags: [ get-geth-api-urls ] }
tasks: tasks: