diff --git a/ansible/roles/win_study/tasks/os-transfer.yml b/ansible/roles/win_study/tasks/os-transfer.yml index da57297..4edbd35 100644 --- a/ansible/roles/win_study/tasks/os-transfer.yml +++ b/ansible/roles/win_study/tasks/os-transfer.yml @@ -3,6 +3,7 @@ file: path: "{{ item }}" state: directory + mode: '0750' loop: "{{ mft_directories }}" when: study_action == 'create' diff --git a/ansible/vars/protected.yml b/ansible/vars/protected.yml index 83ea0a0..6aad896 100644 --- a/ansible/vars/protected.yml +++ b/ansible/vars/protected.yml @@ -69,6 +69,7 @@ remote_ip_rules: - { direction: "ingress", protocol: "tcp", port_min: 3389, port_max: 3389, group: "user_vms", remote_ip: "0.0.0.0/0", comment: "RDP"} # File servers - { direction: "ingress", protocol: "tcp", port_min: 445, port_max: 445, group: "file_server", remote_ip: "10.24.1.220/32", comment: "SMB os-transfer"} + - { direction: "ingress", protocol: "tcp", port_min: 445, port_max: 445, group: "file_server", remote_ip: "10.24.2.72/32", comment: "SMB os-transfer01"} # All Winwdows VMs - { direction: "ingress", protocol: "tcp", port_min: 5985, port_max: 5986, group: "domain_member", remote_ip: "10.24.3.242/32", comment: "WinRM rundeck 3"} diff --git a/ansible/vars/standard.yml b/ansible/vars/standard.yml index 2cf4a68..1427b88 100644 --- a/ansible/vars/standard.yml +++ b/ansible/vars/standard.yml @@ -42,6 +42,7 @@ remote_ip_rules: - { direction: "ingress", protocol: "tcp", port_min: 3389, port_max: 3389, group: "user_vms", remote_ip: "0.0.0.0/0", comment: "RDP"} # File servers - { direction: "ingress", protocol: "tcp", port_min: 445, port_max: 445, group: "file_server", remote_ip: "10.24.1.220/32", comment: "SMB os-transfer"} + - { direction: "ingress", protocol: "tcp", port_min: 445, port_max: 445, group: "file_server", remote_ip: "10.24.2.72/32", comment: "SMB os-transfer01"} # All Winwdows VMs - { direction: "ingress", protocol: "tcp", port_min: 5985, port_max: 5986, group: "domain_member", remote_ip: "10.24.4.71/32", comment: "WinRM rundeck 1"}