Nik Afiq
939a7c6ed1
Some checks failed
validate / lint (push) Failing after 1s
Adds explicit UFW routed-allow rules (10.42.0.0/16 pod-to-pod, pod-to-Technitium DNS) since these nodes default their routed/FORWARD policy to DROP. Also brings nik-debian's NFS (2049) and SMB (445) ports under Ansible-managed UFW rules via the existing nfs-server role, scoped to the Lab/Trusted networks that need them. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
12 lines
337 B
YAML
12 lines
337 B
YAML
---
|
|
# Part of role: nfs-server
|
|
# Called by: ansible/playbooks/setup-nfs-debian.yaml
|
|
# Description: Default variables for the nfs-server role including export path, allowed client IP, and UFW-allowed SMB source networks.
|
|
|
|
nfs_export_path: /mnt/storage
|
|
nfs_allowed_ip: 10.10.40.53
|
|
|
|
smb_allowed_subnets:
|
|
- 10.10.10.0/24
|
|
- 10.10.40.0/24
|