taking over iptables/ip6tables and ipset

This commit is contained in:
2019-05-18 09:38:36 +01:00
parent 2c9be299e0
commit ac521117b0
5 changed files with 92 additions and 0 deletions

View File

@ -23,3 +23,33 @@ configure:
- runas: minion
- require:
- file: /config/config.new
/config/hphr.rules.v4:
file.managed:
- template: jinja
- source: salt://bcp38.iptables.v4
/config/hphr.rules.v6:
file.managed:
- template: jinja
- source: salt://bcp38.iptables.v6
/config/hphr.ipset:
file.managed:
- template: jinja
- source: salt://bcp38.ipset.j2
/config/scripts/vyos-postconfig-bootup.script:
file.managed:
- template: jinja
- source: salt://postconfig.sh
- mode: 760
- require:
- file: /config/hphr.rules.v4
- file: /config/hphr.rules.v6
- file: /config/hphr.ipset
cmd.run:
- name: sudo /config/scripts/vyos-postconfig-bootup.script
- require:
- file: /config/scripts/vyos-postconfig-bootup.script
- cmd: configure