Sebastian Kippe
4872677066
* Remove encfs (using encrypted volumes instead) * Allow access without TLS from zerotier network
16 lines
286 B
Ruby
16 lines
286 B
Ruby
#
|
|
# Cookbook:: kosmos-postgresql
|
|
# Recipe:: firewall
|
|
#
|
|
|
|
unless node.chef_environment == "development"
|
|
include_recipe "kosmos-base::firewall"
|
|
|
|
firewall_rule "postgresql zerotier members" do
|
|
port 5432
|
|
protocol :tcp
|
|
command :allow
|
|
source "10.1.1.0/24"
|
|
end
|
|
end
|