infra/ansible/host_vars/skippy.w5isp.com.yml

35 lines
743 B
YAML

---
ansible_host: skippy
ansible_python_interpreter: /usr/bin/python3
ansible_ssh_common_args: '-o StrictHostKeyChecking=accept-new'
network:
skip: true
nfs_exports:
- path: /data/srtm
clients:
- host: 10.0.0.0/16
options: rw,sync,no_subtree_check,all_squash
- host: 204.110.191.1
options: ro,sync,no_subtree_check,all_squash
firewall_allow_rules:
- port: 80
proto: tcp
comment: HTTP
- port: 443
proto: tcp
comment: HTTPS
- port: 2049
proto: tcp
from_ip: 10.0.0.0/16
comment: NFS from internal
- port: 2049
proto: tcp
from_ip: 204.110.188.0/22
comment: NFS from VNTX
- port: 2049
proto: tcp
from_ip: 100.64.0.0/10
comment: NFS from Tailscale