diff --git a/ansible/group_vars/log-dash.yml b/ansible/group_vars/log-dash.yml index 2dcc914..85c5ae5 100644 --- a/ansible/group_vars/log-dash.yml +++ b/ansible/group_vars/log-dash.yml @@ -29,6 +29,7 @@ es_lb_cont_name: elasticsearch-lb es_lb_data_center: do-ams3 es_lb_cluster_name: 'nimbus-logs-search' es_lb_api_port: 9200 +es_lb_node_port: 9300 logclean_es_host: 'localhost' logclean_es_port: '{{ es_lb_api_port }}' @@ -57,7 +58,10 @@ nginx_sites: } # Open Nginx Ports -open_ports_default_comment: 'HTTP & HTTPS' +open_ports_default_comment: 'ElasticSearch LB' +open_ports_default_chain: 'VPN' open_ports_list: - - { port: 80, protocol: 'tcp' } - - { port: 443, protocol: 'tcp' } + - { port: 80, chain: 'SERVICES', protocol: 'tcp', comment: 'Kiban & Grafana'} + - { port: 443, chain: 'SERVICES', protocol: 'tcp', comment: 'Kiban & Grafana' } + - { port: '{{ es_lb_api_port }}', ipset: 'log-store.nimbus' } + - { port: '{{ es_lb_node_port }}', ipset: 'log-store.nimbus' } diff --git a/ansible/group_vars/log-store.yml b/ansible/group_vars/log-store.yml index 0f86ce0..5f80692 100644 --- a/ansible/group_vars/log-store.yml +++ b/ansible/group_vars/log-store.yml @@ -60,8 +60,10 @@ open_ports_list: - { port: 80, protocol: 'tcp', chain: 'SERVICES' } - { port: 443, protocol: 'tcp', chain: 'SERVICES' } - { port: '{{ es_api_port }}', ipset: 'log-store.nimbus' } + - { port: '{{ es_api_port }}', ipset: 'dash.nimbus' } - { port: '{{ es_api_port }}', ipset: 'log-aggr.hq' } - { port: '{{ es_node_port }}', ipset: 'log-store.nimbus' } + - { port: '{{ es_node_port }}', ipset: 'dash.nimbus' } - { port: '{{ es_metrics_cont_port }}', ipset: 'metrics.hq' } # Proxy for ES HQ diff --git a/ansible/requirements.yml b/ansible/requirements.yml index 6f3ed10..16e368a 100644 --- a/ansible/requirements.yml +++ b/ansible/requirements.yml @@ -16,7 +16,7 @@ - name: infra-role-bootstrap-linux src: git@github.com:status-im/infra-role-bootstrap-linux.git - version: acc383c56588fc81de12214fb8b2a85e0841782d + version: 31dfd8becfbf47f4fc5a4b333ade20a540e8c83f scm: git - name: infra-role-bootstrap-windows @@ -46,12 +46,12 @@ - name: infra-role-beacon-node-linux src: git@github.com:status-im/infra-role-beacon-node-linux.git - version: 43fb41a81c99f4cbff1c8d03a63225722e6ed0e2 + version: 5c3e0d9a625d004881a0720dcaa98b1fdea58d33 scm: git - name: infra-role-beacon-node-windows src: git@github.com:status-im/infra-role-beacon-node-windows.git - version: d46fa367d4e34af0f82fa3aa289a416f0a72dc16 + version: 02074ceeda0694ad9c36d1eca034b3a3cf9a9f19 scm: git - name: infra-role-dist-validators