Add wireguard keepalives to a few more machines

[chef.git] / roles / milkywan.rb

diff --git a/roles/milkywan.rb b/roles/milkywan.rb
index dbfae9fd5475eda0f5bd106f57286eedeb79aa34..7f75a2edc2298d84d0edba8fcd6224f0a364293e 100644 (file)
--- a/roles/milkywan.rb
+++ b/roles/milkywan.rb
@@ -8,14 +8,23 @@ default_attributes(
     }
   },
   :hosted_by => "MilkyWan",
-  :location => "France",
+  :location => "Paris, France",
   :networking => {
-    :nameservers => ["130.117.11.11", "2a0b:cbc0:42::42"],
-    :roles => {
-      :external => {
-        :zone => "osm"
-      }
-    }
+    :firewall => {
+      :inet => [
+        {
+          :action => "ACCEPT",
+          :source => "net:212.25.24.64/28",
+          :dest => "fw",
+          :proto => "udp",
+          :dest_ports => "snmp",
+          :source_ports => "1024:",
+          :rate_limit => "-",
+          :connection_limit => "-"
+        }
+      ]
+    },
+    :nameservers => ["130.117.11.11", "2a0b:cbc0:42::42"]
   }
 )