Allow IPFS connections on private network

(HAProxy is now also using the private network.)

This fixes IPFS connections to Kosmos nodes from outside the network, as
well as in between nodes on the private network.

site-cookbooks/kosmos-ipfs/recipes/default.rb

@@ -24,3 +24,19 @@ firewall_rule 'ipfs_api' do
   command  :allow
   logging  :connections
 end
+
+firewall_rule 'ipfs_local_p2p_allow_out' do
+  destination "10.1.1.0/24"
+  direction   :out
+  protocol    :none
+  command     :allow
+  logging     :connections
+end
+
+firewall_rule 'ipfs_local_p2p_deny_out' do
+  destination "10.0.0.0/8"
+  direction   :out
+  protocol    :none
+  command     :deny
+  logging     :connections
+end