Update cookbooks and add wordpress cookbook
This commit is contained in:
@@ -1 +1,2 @@
|
||||
default['firewall']['allow_ssh'] = false
|
||||
default['firewall']['allow_winrm'] = false
|
||||
|
||||
1
cookbooks/firewall/attributes/firewalld.rb
Normal file
1
cookbooks/firewall/attributes/firewalld.rb
Normal file
@@ -0,0 +1 @@
|
||||
default['firewall']['firewalld']['permanent'] = false
|
||||
17
cookbooks/firewall/attributes/iptables.rb
Normal file
17
cookbooks/firewall/attributes/iptables.rb
Normal file
@@ -0,0 +1,17 @@
|
||||
default['firewall']['iptables']['defaults'][:policy] = {
|
||||
input: 'DROP',
|
||||
forward: 'DROP',
|
||||
output: 'ACCEPT'
|
||||
}
|
||||
default['firewall']['iptables']['defaults'][:ruleset] = {
|
||||
'*filter' => 1,
|
||||
":INPUT #{node['firewall']['iptables']['defaults'][:policy][:input]}" => 2,
|
||||
":FORWARD #{node['firewall']['iptables']['defaults'][:policy][:forward]}" => 3,
|
||||
":OUTPUT #{node['firewall']['iptables']['defaults'][:policy][:output]}" => 4,
|
||||
'COMMIT_FILTER' => 100
|
||||
}
|
||||
|
||||
default['firewall']['ubuntu_iptables'] = false
|
||||
default['firewall']['redhat7_iptables'] = false
|
||||
default['firewall']['allow_established'] = true
|
||||
default['firewall']['ipv6_enabled'] = true
|
||||
@@ -1,12 +1,12 @@
|
||||
default['firewall']['ufw']['defaults'] = {
|
||||
:ipv6 => 'yes',
|
||||
:manage_builtins => 'no',
|
||||
:ipt_sysctl => '/etc/ufw/sysctl.conf',
|
||||
:ipt_modules => 'nf_conntrack_ftp nf_nat_ftp nf_conntrack_netbios_ns',
|
||||
:policy => {
|
||||
:input => 'DROP',
|
||||
:output => 'ACCEPT',
|
||||
:forward => 'DROP',
|
||||
:application => 'SKIP'
|
||||
ipv6: 'yes',
|
||||
manage_builtins: 'no',
|
||||
ipt_sysctl: '/etc/ufw/sysctl.conf',
|
||||
ipt_modules: 'nf_conntrack_ftp nf_nat_ftp nf_conntrack_netbios_ns',
|
||||
policy: {
|
||||
input: 'DROP',
|
||||
output: 'ACCEPT',
|
||||
forward: 'DROP',
|
||||
application: 'SKIP'
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user