feat: rm ufw
configuring a firewall is external to installing mCaptcha, since we use standard HTTP ports only. Should also make testing with woodpecker CI easy.
This commit is contained in:
parent
50569c8a32
commit
4a81e7d591
3 changed files with 2 additions and 12 deletions
|
@ -8,8 +8,6 @@
|
||||||
pre_tasks:
|
pre_tasks:
|
||||||
- name: Ensure all VMs are reachable
|
- name: Ensure all VMs are reachable
|
||||||
ansible.builtin.ping:
|
ansible.builtin.ping:
|
||||||
roles:
|
|
||||||
- ufw
|
|
||||||
|
|
||||||
tasks:
|
tasks:
|
||||||
- name: Install git, zip, nginx, wget, curl & other utils
|
- name: Install git, zip, nginx, wget, curl & other utils
|
||||||
|
@ -27,4 +25,3 @@
|
||||||
- python3-pip
|
- python3-pip
|
||||||
- virtualenv
|
- virtualenv
|
||||||
- python3-setuptools
|
- python3-setuptools
|
||||||
- ufw
|
|
||||||
|
|
|
@ -4,6 +4,8 @@
|
||||||
# SPDX-License-Identifier: AGPL-3.0-or-later
|
# SPDX-License-Identifier: AGPL-3.0-or-later
|
||||||
- name: Base configuration
|
- name: Base configuration
|
||||||
ansible.builtin.import_playbook: base.yml
|
ansible.builtin.import_playbook: base.yml
|
||||||
|
roles:
|
||||||
|
- ufw
|
||||||
|
|
||||||
- name: Configure Locust instances
|
- name: Configure Locust instances
|
||||||
hosts: [mcaptcha_dos]
|
hosts: [mcaptcha_dos]
|
||||||
|
|
|
@ -59,7 +59,6 @@
|
||||||
cache_valid_time: 3600
|
cache_valid_time: 3600
|
||||||
pkg:
|
pkg:
|
||||||
- nginx
|
- nginx
|
||||||
- ufw
|
|
||||||
|
|
||||||
- name: Copy nginx vhost
|
- name: Copy nginx vhost
|
||||||
become: true
|
become: true
|
||||||
|
@ -83,11 +82,3 @@
|
||||||
ansible.builtin.service:
|
ansible.builtin.service:
|
||||||
name: nginx
|
name: nginx
|
||||||
state: restarted
|
state: restarted
|
||||||
|
|
||||||
- name: Allow port 80 and enable UFW
|
|
||||||
become: true
|
|
||||||
community.general.ufw:
|
|
||||||
state: enabled
|
|
||||||
rule: allow
|
|
||||||
proto: tcp
|
|
||||||
port: "80"
|
|
||||||
|
|
Loading…
Reference in a new issue