aboutsummaryrefslogtreecommitdiff
path: root/ansible/host_vars/arius
diff options
context:
space:
mode:
authorTrygve Laugstøl <trygvis@inamo.no>2019-01-11 07:45:58 +0100
committerTrygve Laugstøl <trygvis@inamo.no>2019-01-11 07:45:58 +0100
commit99ce768a7d6fe9e828caf932554c4e095c1d00b2 (patch)
treeb367f0776e0640714d6a581ba5eb0d4e2f3d1b76 /ansible/host_vars/arius
parentfca718acb8d31e3f05608fb5aedfa4c7d34c7455 (diff)
downloadinfra-99ce768a7d6fe9e828caf932554c4e095c1d00b2.tar.gz
infra-99ce768a7d6fe9e828caf932554c4e095c1d00b2.tar.bz2
infra-99ce768a7d6fe9e828caf932554c4e095c1d00b2.tar.xz
infra-99ce768a7d6fe9e828caf932554c4e095c1d00b2.zip
lxc-host: Moving to its own playbook. Adding arius-test1. Only
configuring ipv4/6 forwarding for the created interface. Adding configurable ipv6 address too. wireguard: Tagging old nets with never. nftables: Trying out portforwarding on arius.
Diffstat (limited to 'ansible/host_vars/arius')
-rw-r--r--ansible/host_vars/arius/lxc.yml4
-rw-r--r--ansible/host_vars/arius/nftables.yml23
2 files changed, 27 insertions, 0 deletions
diff --git a/ansible/host_vars/arius/lxc.yml b/ansible/host_vars/arius/lxc.yml
new file mode 100644
index 0000000..5eea54d
--- /dev/null
+++ b/ansible/host_vars/arius/lxc.yml
@@ -0,0 +1,4 @@
+lxc_host__containers:
+ test1:
+ state: started
+ host_database: arius-test1
diff --git a/ansible/host_vars/arius/nftables.yml b/ansible/host_vars/arius/nftables.yml
index 6f4f167..8a276ff 100644
--- a/ansible/host_vars/arius/nftables.yml
+++ b/ansible/host_vars/arius/nftables.yml
@@ -43,3 +43,26 @@ nftables_tables:
- position: 1
statement: ""
# statement: "ip daddr 192.0.2.100 counter"
+
+ - name: nat
+ family: ip
+ chains:
+ - name: "prerouting"
+ base:
+ type: "nat"
+ hook: "prerouting"
+ priority: 0
+ rules:
+# - position: 1
+# statement: "iif wlp1s0 tcp dport { 2222 } dnat 192.168.10.176:22"
+ - position: 1
+ statement: ""
+
+ - name: "postrouting"
+ base:
+ type: "nat"
+ hook: "postrouting"
+ priority: 100
+ rules:
+ - position: 1
+ statement: "masquerade random,persistent"