Skip to content
Extraits de code Groupes Projets
Valider 328b050c rédigé par Théo - Le Filament's avatar Théo - Le Filament
Parcourir les fichiers

fix error when groups are missing

parent 683faade
Aucune branche associée trouvée
Aucune étiquette associée trouvée
Aucune requête de fusion associée trouvée
......@@ -3,11 +3,11 @@
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT DROP [0:0]
{% if inventory_hostname in groups.docker_elk %}
{% if 'docker_elk' in groups and inventory_hostname in groups.docker_elk %}
:DOCKER-USER - [0:0]
{% endif %}
:LOGGING - [0:0]
{% if inventory_hostname in groups.docker_elk %}
{% if 'docker_elk' in groups and inventory_hostname in groups.docker_elk %}
## DOCKER-USER chain
# Autoriser les logs entrants des serveurs en maintenance
{% for host in groups.full_maintenance %}
......@@ -37,7 +37,7 @@
-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 443 -j ACCEPT
{% endif %}
{% if inventory_hostname in groups.docker_nagios %}
{% if 'docker_gitlab' in groups and inventory_hostname in groups.docker_nagios %}
-A INPUT -s 192.168.239.0/24 -p tcp -m tcp --dport 443 -m state --state NEW,ESTABLISHED -j ACCEPT
{% endif %}
# NRPE
......@@ -72,7 +72,7 @@
-A OUTPUT -p tcp -m tcp --dport 22 -j ACCEPT
{% endif %}
-A OUTPUT -p tcp -m tcp --dport {{ default_sshd_port }} -j ACCEPT
{% for host in groups.gitlab | union(groups.docker_gitlab) %}
{% for host in groups.gitlab | union(groups.docker_gitlab | default([])) %}
-A OUTPUT -d {{ hostvars[host].ansible_host }} -p tcp -m tcp --dport 22 -j ACCEPT
-A OUTPUT -d {{ hostvars[host].ansible_host }} -p tcp -m tcp --dport 5050 -j ACCEPT
{% endfor %}
......@@ -100,7 +100,7 @@
-A OUTPUT -p udp -m udp --dport 11371 -j ACCEPT
{% if inventory_hostname in groups.full_maintenance %}
# Log Server
{% for host in groups.docker_elk %}
{% for host in groups.docker_elk | default([]) %}
-A OUTPUT -d {{ hostvars[host].ansible_host }} -p tcp -m tcp --dport {{ logstash_port }} -j ACCEPT
{% endfor %}
-A OUTPUT -d {{ logstash_public_ip }} -p tcp -m tcp --dport {{ logstash_port }} -j ACCEPT
......
0% Chargement en cours ou .
You are about to add 0 people to the discussion. Proceed with caution.
Veuillez vous inscrire ou vous pour commenter