status-im
/
infra-nimbus
mirror of https://github.com/status-im/infra-nimbus.git
2
0
Fork 0
Code Issues Projects Releases Wiki Activity

logs: Migrate to nftables 

Referenced issue: https://github.com/status-im/infra-misc/issues/301

Signed-off-by: markoburcul <marko@status.im>
This commit is contained in:
markoburcul 2024-10-08 09:39:56 +02:00 committed by Marko Burčul
parent c58c59245a
commit e0b5b78720
1 changed files with 14 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
ansible/group_vars/logs.nimbus.yml
View File

@ -47,17 +47,20 @@ es_jvm_heap_auto: false
es_jvm_min_heap: 40g es_jvm_min_heap: 40g
es_jvm_max_heap: 40g es_jvm_max_heap: 40g
# Migrated to NFTables from IPTables.
# https://github.com/status-im/infra-misc/issues/301
bootstrap__firewall_nftables: true
# Open Ports # Open Ports
open_ports_default_comment: 'ElasticSearch' open_ports_default_comment: 'ElasticSearch'
open_ports_default_chain: 'VPN'
open_ports_list: open_ports_list:
- { port: 80, chain: 'SERVICES' } elasticsearch:
- { port: 443, chain: 'SERVICES' } - { port: '{{ es_api_port }}', ipset: 'metrics.hq', iifname: 'wg0' }
- { port: '{{ es_api_port }}', ipset: 'dash.hq' } - { port: '{{ es_api_port }}', ipset: 'logs.hq', iifname: 'wg0' }
- { port: '{{ es_api_port }}', ipset: 'logs.hq' } - { port: '{{ es_api_port }}', ipset: 'logs.nimbus', iifname: 'wg0' }
- { port: '{{ es_api_port }}', ipset: 'logs.nimbus' } - { port: '{{ es_api_port }}', ipset: 'dash.nimbus', iifname: 'wg0' }
- { port: '{{ es_api_port }}', ipset: 'dash.nimbus' } - { port: '{{ es_node_port }}', ipset: 'logs.nimbus', iifname: 'wg0' }
- { port: '{{ es_node_port }}', ipset: 'logs.nimbus' } - { port: '{{ es_node_port }}', ipset: 'dash.nimbus', iifname: 'wg0' }
- { port: '{{ es_node_port }}', ipset: 'dash.nimbus' } elasticsearch_metrics:
- { port: '{{ es_exp_cont_port }}', ipset: 'metrics.hq' } - { port: '{{ es_exp_cont_port }}', ipset: 'metrics.hq', iifname: 'wg0' }
- { port: '{{ smart_metrics_listen_port }}', ipset: 'metrics.hq', comment: 'SMART Metrics' } - { port: '{{ smart_metrics_listen_port }}', ipset: 'metrics.hq', iifname: 'wg0', comment: 'SMART Metrics' }