drop adding iptables rule for opening oauth port
Signed-off-by: Jakub Sokołowski <jakub@status.im>
This commit is contained in:
parent
567b4cf59d
commit
05ef1410ab
|
@ -10,7 +10,6 @@ oauth_domain: 'oauth.example.org'
|
|||
oauth_cont_name: 'some-container-name-oauth'
|
||||
oauth_upstream_cont: 'some-container-name'
|
||||
oauth_upstream_port: 4321
|
||||
oauth_public_port: 443
|
||||
oauth_local_port: 1234
|
||||
oauth_cookie_secret: '123qweASD'
|
||||
oauth_id: 'some-id'
|
||||
|
|
|
@ -1,5 +1,5 @@
|
|||
---
|
||||
oauth_proxy_tag: 'v7.0.0-amd64'
|
||||
oauth_proxy_tag: 'v7.1.3-amd64'
|
||||
oauth_proxy_image: 'quay.io/oauth2-proxy/oauth2-proxy:{{ oauth_proxy_tag }}'
|
||||
oauth_cont_name: oauth2
|
||||
oauth_github_org: 'status-im'
|
||||
|
@ -19,7 +19,6 @@ oauth_cont_etc_hosts:
|
|||
|
||||
# domain under which the oauth will be available
|
||||
oauth_domain: ~
|
||||
oauth_public_port: ~
|
||||
oauth_local_port: ~
|
||||
|
||||
# required auth options
|
||||
|
|
|
@ -1,3 +0,0 @@
|
|||
---
|
||||
- name: Save iptables rules
|
||||
shell: iptables-save > /etc/iptables/rules.v4
|
|
@ -34,14 +34,3 @@
|
|||
--http-address='0.0.0.0:{{ oauth_local_port | mandatory }}'
|
||||
--upstream='http://{{ oauth_upstream_name }}:{{ oauth_upstream_port | mandatory }}/'
|
||||
--request-logging=false
|
||||
|
||||
- name: 'OAuth Proxy | Enable public port: {{ oauth_public_port }}'
|
||||
iptables:
|
||||
comment: 'OAuth Public Port'
|
||||
chain: INPUT
|
||||
jump: ACCEPT
|
||||
source: '0.0.0.0/0'
|
||||
protocol: 'tcp'
|
||||
destination_port: '{{ oauth_public_port | string }}'
|
||||
notify:
|
||||
- Save iptables rules
|
||||
|
|
Loading…
Reference in New Issue