firewall: add rules to new SERVICES chain

https://github.com/status-im/infra-hq/issues/69 https://github.com/status-im/infra-role-bootstrap-linux/commit/92d8923b https://github.com/status-im/infra-role-wireguard/commit/8394639e Signed-off-by: Jakub Sokołowski <jakub@status.im>
2021-08-02 19:39:55 +02:00 · 2021-08-02 19:39:55 +02:00 · 5b91c936dc
parent 06966616e6
commit 5b91c936dc
1 changed files with 2 additions and 3 deletions
--- a/tasks/firewall.yml
+++ b/tasks/firewall.yml
@ -2,9 +2,8 @@
 - name: Geth | Enable ports on firewall
  iptables:
    comment: '{{ geth_cont_name }} {{ item }}'
-    jump: ACCEPT
-    action: insert
-    chain: DOCKER-USER
+    jump: 'ACCEPT'
+    chain: 'SERVICES'
    source: '0.0.0.0/0'
    protocol: '{{ item }}'
    destination_port: '{{ geth_port | string }}'