mCaptcha/iac
2
0
Fork 0
Code Issues 1 Pull requests 10 Projects Releases Packages Wiki Activity

feat: rm ufw

Browse source 
configuring a firewall is external to installing mCaptcha, since we use
standard HTTP ports only. Should also make testing with woodpecker CI
easy.
This commit is contained in:
Aravinth Manivannan 2023-12-11 14:30:54 +05:30
parent 50569c8a32
commit c469878daf
Signed by: realaravinth
GPG key ID: F8F50389936984FF
3 changed files with 2 additions and 12 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
ansible/base.yml
View file

@ -8,8 +8,6 @@
pre_tasks: pre_tasks:
- name: Ensure all VMs are reachable - name: Ensure all VMs are reachable
ansible.builtin.ping: ansible.builtin.ping:
roles:
- ufw
tasks: tasks:
- name: Install git, zip, nginx, wget, curl & other utils - name: Install git, zip, nginx, wget, curl & other utils
@ -27,4 +25,3 @@
- python3-pip - python3-pip
- virtualenv - virtualenv
- python3-setuptools - python3-setuptools
- ufw

2
ansible/locust.yml
View file

@ -4,6 +4,8 @@
# SPDX-License-Identifier: AGPL-3.0-or-later # SPDX-License-Identifier: AGPL-3.0-or-later
- name: Base configuration - name: Base configuration
ansible.builtin.import_playbook: base.yml ansible.builtin.import_playbook: base.yml
roles:
- ufw
- name: Configure Locust instances - name: Configure Locust instances
hosts: [mcaptcha_dos] hosts: [mcaptcha_dos]

9
ansible/mcaptcha.yml
View file

@ -59,7 +59,6 @@
cache_valid_time: 3600 cache_valid_time: 3600
pkg: pkg:
- nginx - nginx
- ufw
- name: Copy nginx vhost - name: Copy nginx vhost
become: true become: true
@ -83,11 +82,3 @@
ansible.builtin.service: ansible.builtin.service:
name: nginx name: nginx
state: restarted state: restarted
- name: Allow port 80 and enable UFW
become: true
community.general.ufw:
state: enabled
rule: allow
proto: tcp
port: "80"