Allow database connections from VPN addresses

[chef.git] / roles / spike-01.rb

diff --git a/roles/spike-01.rb b/roles/spike-01.rb
index 97fec5fd2297ac5359b2d1910284a19aefe67af1..7ac4eceaead3a90d995efe0fb12544328c0d732a 100644 (file)
--- a/roles/spike-01.rb
+++ b/roles/spike-01.rb
@@ -8,19 +8,31 @@ default_attributes(
         :interface => "eth0",
         :role => :internal,
         :family => :inet,
-        :address => "146.179.159.162"
+        :address => "146.179.159.162",
+        :hwaddress => "00:1a:4b:a5:0f:ca"
       },
       :external_ipv4 => {
         :interface => "eth1",
         :role => :external,
         :family => :inet,
-        :address => "193.63.75.99"
+        :address => "193.63.75.99",
+        :hwaddress => "00:1a:4b:a5:fd:2a"
       },
       :external_ipv6 => {
         :interface => "eth1",
         :role => :external,
         :family => :inet6,
-        :address => "2001:630:12:500:21a:4bff:fea5:fd2a"
+        :address => "2001:630:12:500:21a:4bff:fea5:fd2a",
+        :hwaddress => "00:1a:4b:a5:fd:2a"
+      }
+    }
+  },
+  :sysctl => {
+    :ipv6_autoconf => {
+      :comment => "Disable IPv6 auto-configuration on internal interface",
+      :parameters => {
+        "net.ipv6.conf.eth0.autoconf" => "0",
+        "net.ipv6.conf.eth0.accept_ra" => "0"
       }
     }
   }
@@ -28,6 +40,7 @@ default_attributes(
 
 run_list(
   "role[ic]",
+  "role[hp-dl360-g6]",
   "role[web-frontend]",
   "role[web-gpximport]",
   "role[web-statistics]",