Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions roles/create_server/tasks/providers/digitalocean.yml
Original file line number Diff line number Diff line change
Expand Up @@ -76,6 +76,10 @@
ports: "443"
sources:
addresses: ["0.0.0.0/0", "::/0"]
- protocol: udp
ports: "443"
sources:
addresses: ["0.0.0.0/0", "::/0"]
- protocol: tcp
ports: "2222"
sources:
Expand Down
7 changes: 7 additions & 0 deletions roles/create_server/tasks/providers/hetzner.yml
Original file line number Diff line number Diff line change
Expand Up @@ -61,6 +61,13 @@
source_ips:
- 0.0.0.0/0
- ::/0
- description: allow https udp from everywhere
direction: in
protocol: udp
port: 443
source_ips:
- 0.0.0.0/0
- ::/0
- description: allow ssh tunnel from everywhere
direction: in
protocol: tcp
Expand Down
14 changes: 14 additions & 0 deletions roles/create_server/tasks/providers/vultr.yml
Original file line number Diff line number Diff line change
Expand Up @@ -98,6 +98,20 @@
subnet: "::"
subnet_size: 0
description: "allow https from everywhere"
# HTTPS (IPv4)
- protocol: udp
port: "443"
ip_type: v4
subnet: "0.0.0.0"
subnet_size: 0
description: "allow https from everywhere"
# HTTPS (IPv6)
- protocol: udp
port: "443"
ip_type: v6
subnet: "::"
subnet_size: 0
description: "allow https from everywhere"
# SSH Tunnel (IPv4)
- protocol: tcp
port: "2222"
Expand Down
13 changes: 7 additions & 6 deletions roles/swarm/tasks/configure-swarm.yml
Original file line number Diff line number Diff line change
Expand Up @@ -7,11 +7,12 @@
- name: Open HTTP and HTTPS ports (if enabled)
community.general.ufw:
rule: allow
port: "{{ item }}"
proto: "tcp"
comment: "Allow HTTP connections."
port: "{{ item.port }}"
proto: "{{ item.proto }}"
comment: "Allow HTTP/HTTPS connections."
loop:
- "80"
- "443"
- { port: "80", proto: "tcp" }
- { port: "443", proto: "tcp" }
- { port: "443", proto: "udp" }
when: automatically_open_http_and_https_ports | bool
notify: Enable ufw
notify: Enable ufw