drop adding iptables rule for opening oauth port

Signed-off-by: Jakub Sokołowski <jakub@status.im>
This commit is contained in:
Jakub Sokołowski 2021-08-16 11:06:04 +02:00
parent 567b4cf59d
commit 05ef1410ab
No known key found for this signature in database
GPG Key ID: 4EF064D0E6D63020
4 changed files with 1 additions and 17 deletions

View File

@ -10,7 +10,6 @@ oauth_domain: 'oauth.example.org'
oauth_cont_name: 'some-container-name-oauth'
oauth_upstream_cont: 'some-container-name'
oauth_upstream_port: 4321
oauth_public_port: 443
oauth_local_port: 1234
oauth_cookie_secret: '123qweASD'
oauth_id: 'some-id'

View File

@ -1,5 +1,5 @@
---
oauth_proxy_tag: 'v7.0.0-amd64'
oauth_proxy_tag: 'v7.1.3-amd64'
oauth_proxy_image: 'quay.io/oauth2-proxy/oauth2-proxy:{{ oauth_proxy_tag }}'
oauth_cont_name: oauth2
oauth_github_org: 'status-im'
@ -19,7 +19,6 @@ oauth_cont_etc_hosts:
# domain under which the oauth will be available
oauth_domain: ~
oauth_public_port: ~
oauth_local_port: ~
# required auth options

View File

@ -1,3 +0,0 @@
---
- name: Save iptables rules
shell: iptables-save > /etc/iptables/rules.v4

View File

@ -34,14 +34,3 @@
--http-address='0.0.0.0:{{ oauth_local_port | mandatory }}'
--upstream='http://{{ oauth_upstream_name }}:{{ oauth_upstream_port | mandatory }}/'
--request-logging=false
- name: 'OAuth Proxy | Enable public port: {{ oauth_public_port }}'
iptables:
comment: 'OAuth Public Port'
chain: INPUT
jump: ACCEPT
source: '0.0.0.0/0'
protocol: 'tcp'
destination_port: '{{ oauth_public_port | string }}'
notify:
- Save iptables rules