Add firewall definitions.

2023-04-04 14:28:19 +01:00 · 2023-04-04 14:28:19 +01:00 · 4d13ad1145
parent de539d163f
commit 4d13ad1145
2 changed files with 35 additions and 8 deletions
--- a/states/firewalls/hedwig.sls
+++ b/states/firewalls/hedwig.sls
@ -2,9 +2,22 @@ hedwig_public:
  firewalld.present:
    - name: public
    - default: False
-    - ports:
-      - 22/tcp
-      - 80/tcp
-      - 443/tcp
+    - services:
+      - dhcpv6-client
+      - ssh
+    - prune_services: True
    - require:
      - firewalld
+
+hedwig_mythic_proxy:
+  firewalld.present:
+    - name: mythicproxy
+    - default: False
+    - services:
+      - http
+      - https
+    - prune_services: True
+    - sources:
+      - 2a00:1098::82:1000:3b:1:1
+      - 2a00:1098::80:1000:3b:1:1
+
--- a/states/firewalls/scabbers.sls
+++ b/states/firewalls/scabbers.sls
@ -2,9 +2,23 @@ scabbers_public:
  firewalld.present:
    - name: public
    - default: False
-    - ports:
-      - 22/tcp
-      - 80/tcp
-      - 443/tcp
+    - services:
+      - dhcpv6-client
+      - ssh
+    - prune_services: True
    - require:
      - firewalld
+
+scabbers_mythic_proxy:
+  firewalld.present:
+    - name: mythicproxy
+    - default: False
+    - services:
+      - http
+      - https
+    - prune_services: True
+    - sources:
+      - 2a00:1098::82:1000:3b:1:1
+      - 2a00:1098::80:1000:3b:1:1
+
+