From cb28448e242a34f6f58874f0ed1d6039fbd30699 Mon Sep 17 00:00:00 2001 From: abrown38 Date: Thu, 24 Oct 2024 10:39:23 +0100 Subject: [PATCH] change to allow switch to new os-transfer VM if needed --- ansible/roles/win_study/tasks/os-transfer.yml | 1 + ansible/vars/protected.yml | 1 + ansible/vars/standard.yml | 1 + 3 files changed, 3 insertions(+) diff --git a/ansible/roles/win_study/tasks/os-transfer.yml b/ansible/roles/win_study/tasks/os-transfer.yml index da57297..4edbd35 100644 --- a/ansible/roles/win_study/tasks/os-transfer.yml +++ b/ansible/roles/win_study/tasks/os-transfer.yml @@ -3,6 +3,7 @@ file: path: "{{ item }}" state: directory + mode: '0750' loop: "{{ mft_directories }}" when: study_action == 'create' diff --git a/ansible/vars/protected.yml b/ansible/vars/protected.yml index 83ea0a0..6aad896 100644 --- a/ansible/vars/protected.yml +++ b/ansible/vars/protected.yml @@ -69,6 +69,7 @@ remote_ip_rules: - { direction: "ingress", protocol: "tcp", port_min: 3389, port_max: 3389, group: "user_vms", remote_ip: "0.0.0.0/0", comment: "RDP"} # File servers - { direction: "ingress", protocol: "tcp", port_min: 445, port_max: 445, group: "file_server", remote_ip: "10.24.1.220/32", comment: "SMB os-transfer"} + - { direction: "ingress", protocol: "tcp", port_min: 445, port_max: 445, group: "file_server", remote_ip: "10.24.2.72/32", comment: "SMB os-transfer01"} # All Winwdows VMs - { direction: "ingress", protocol: "tcp", port_min: 5985, port_max: 5986, group: "domain_member", remote_ip: "10.24.3.242/32", comment: "WinRM rundeck 3"} diff --git a/ansible/vars/standard.yml b/ansible/vars/standard.yml index 2cf4a68..1427b88 100644 --- a/ansible/vars/standard.yml +++ b/ansible/vars/standard.yml @@ -42,6 +42,7 @@ remote_ip_rules: - { direction: "ingress", protocol: "tcp", port_min: 3389, port_max: 3389, group: "user_vms", remote_ip: "0.0.0.0/0", comment: "RDP"} # File servers - { direction: "ingress", protocol: "tcp", port_min: 445, port_max: 445, group: "file_server", remote_ip: "10.24.1.220/32", comment: "SMB os-transfer"} + - { direction: "ingress", protocol: "tcp", port_min: 445, port_max: 445, group: "file_server", remote_ip: "10.24.2.72/32", comment: "SMB os-transfer01"} # All Winwdows VMs - { direction: "ingress", protocol: "tcp", port_min: 5985, port_max: 5986, group: "domain_member", remote_ip: "10.24.4.71/32", comment: "WinRM rundeck 1"}