Set up fail2ban for nginx, move IPFS gateway to proxy role

2022-11-22 21:16:27 +01:00
parent 7f545404b1
commit d06f5d7723
33 changed files with 1528 additions and 100 deletions
--- a/site-cookbooks/kosmos-ipfs/recipes/default.rb
+++ b/site-cookbooks/kosmos-ipfs/recipes/default.rb
@@ -18,7 +18,14 @@ unless node.chef_environment == "development"
 end

 firewall_rule 'ipfs_api' do
-  port     node['kosmos-ipfs']['api']['port']
+  port     node['kosmos-ipfs']['api_port']
+  source   "10.1.1.0/24"
+  protocol :tcp
+  command  :allow
+end
+
+firewall_rule 'ipfs_gateway' do
+  port     node['kosmos-ipfs']['gateway_port']
  source   "10.1.1.0/24"
  protocol :tcp
  command  :allow