diff --git a/ansible/vars/protected.yml b/ansible/vars/protected.yml index 14f8091..f26e7b6 100644 --- a/ansible/vars/protected.yml +++ b/ansible/vars/protected.yml @@ -76,11 +76,3 @@ remote_ip_rules: - { direction: "ingress", protocol: "tcp", port_min: 22, port_max: 22, group: "proxy", remote_ip: "10.24.4.71/32", comment: "SSH rundeck 1"} - { direction: "ingress", protocol: "tcp", port_min: 22, port_max: 22, group: "proxy", remote_ip: "10.24.3.172/32", comment: "SSH rundeck 2"} - { direction: "ingress", protocol: "tcp", port_min: 22, port_max: 22, group: "proxy", remote_ip: "10.24.3.242/32", comment: "SSH rundeck 3"} - - -# ONLY PROTECTED FOR PROXY SSH and http[s] - #- { direction: "ingress", protocol: "tcp", port_min: 22, port_max: 22, group: "proxy", remote_group: "10.24.4.71/32", comment: "SSH rundeck 1"} - #- { direction: "ingress", protocol: "tcp", port_min: 22, port_max: 22, group: "proxy", remote_group: "10.24.3.172/32", comment: "SSH rundeck 2"} - #- { direction: "ingress", protocol: "tcp", port_min: 22, port_max: 22, group: "proxy", remote_group: "10.24.3.242/32", comment: "SSH rundeck 3"} - #- { direction: "ingress", protocol: "tcp", port_min: 80, port_max: 80, group: "proxy", remote_group: "", comment: "HTTP proxy"} - #- { direction: "ingress", protocol: "tcp", port_min: 443, port_max: 443, group: "proxy", remote_group: "", comment: "HTTPS proxy"} diff --git a/ansible/vars/standard.yml b/ansible/vars/standard.yml index 31df5c1..6e12bd4 100644 --- a/ansible/vars/standard.yml +++ b/ansible/vars/standard.yml @@ -49,11 +49,3 @@ remote_ip_rules: - { direction: "ingress", protocol: "tcp", port_min: 5985, port_max: 5986, group: "domain_member", remote_ip: "10.24.3.242/32", comment: "WinRM rundeck 3"} - { direction: "ingress", protocol: "tcp", port_min: 6556, port_max: 6556, group: "domain_member", remote_ip: "10.24.2.152/32", comment: "CheckMK Agent"} # create groups with no rules add default egress here??? - - -# ONLY PROTECTED FOR PROXY SSH and http[s] - #- { direction: "ingress", protocol: "tcp", port_min: 22, port_max: 22, group: "proxy", remote_group: "10.24.4.71/32", comment: "SSH rundeck 1"} - #- { direction: "ingress", protocol: "tcp", port_min: 22, port_max: 22, group: "proxy", remote_group: "10.24.3.172/32", comment: "SSH rundeck 2"} - #- { direction: "ingress", protocol: "tcp", port_min: 22, port_max: 22, group: "proxy", remote_group: "10.24.3.242/32", comment: "SSH rundeck 3"} - #- { direction: "ingress", protocol: "tcp", port_min: 80, port_max: 80, group: "proxy", remote_group: "", comment: "HTTP proxy"} - #- { direction: "ingress", protocol: "tcp", port_min: 443, port_max: 443, group: "proxy", remote_group: "", comment: "HTTPS proxy"}