Update cookbooks and add wordpress cookbook

This commit is contained in:
Greg Karékinian
2016-02-19 18:09:49 +01:00
parent 9ba973e3ac
commit 820b0ab3f8
606 changed files with 22421 additions and 14084 deletions

View File

@@ -1 +1,2 @@
default['firewall']['allow_ssh'] = false
default['firewall']['allow_winrm'] = false

View File

@@ -0,0 +1 @@
default['firewall']['firewalld']['permanent'] = false

View File

@@ -0,0 +1,17 @@
default['firewall']['iptables']['defaults'][:policy] = {
input: 'DROP',
forward: 'DROP',
output: 'ACCEPT'
}
default['firewall']['iptables']['defaults'][:ruleset] = {
'*filter' => 1,
":INPUT #{node['firewall']['iptables']['defaults'][:policy][:input]}" => 2,
":FORWARD #{node['firewall']['iptables']['defaults'][:policy][:forward]}" => 3,
":OUTPUT #{node['firewall']['iptables']['defaults'][:policy][:output]}" => 4,
'COMMIT_FILTER' => 100
}
default['firewall']['ubuntu_iptables'] = false
default['firewall']['redhat7_iptables'] = false
default['firewall']['allow_established'] = true
default['firewall']['ipv6_enabled'] = true

View File

@@ -1,12 +1,12 @@
default['firewall']['ufw']['defaults'] = {
:ipv6 => 'yes',
:manage_builtins => 'no',
:ipt_sysctl => '/etc/ufw/sysctl.conf',
:ipt_modules => 'nf_conntrack_ftp nf_nat_ftp nf_conntrack_netbios_ns',
:policy => {
:input => 'DROP',
:output => 'ACCEPT',
:forward => 'DROP',
:application => 'SKIP'
ipv6: 'yes',
manage_builtins: 'no',
ipt_sysctl: '/etc/ufw/sysctl.conf',
ipt_modules: 'nf_conntrack_ftp nf_nat_ftp nf_conntrack_netbios_ns',
policy: {
input: 'DROP',
output: 'ACCEPT',
forward: 'DROP',
application: 'SKIP'
}
}