Block unspecified and multicast addresses on the outside

[chef.git] / roles / noquiklos.rb

diff --git a/roles/noquiklos.rb b/roles/noquiklos.rb
index 0cf85aaafa7667e8be72c3c541d76eb065a82639..e7078609fda16f38beb6300b6b43ca693c7ffc33 100644 (file)
--- a/roles/noquiklos.rb
+++ b/roles/noquiklos.rb
@@ -2,18 +2,31 @@ name "noquiklos"
 description "Master role applied to noquiklos"
 
 default_attributes(
+  :memcached => {
+    :memory_limit => 24 * 1024
+  },
   :networking => {
+    :firewall => {
+      :engine => "nftables"
+    },
     :interfaces => {
       :internal_ipv4 => {
-        :interface => "eth0",
+        :interface => "eth0.2801",
         :role => :internal,
         :family => :inet,
-        :address => "10.89.121.98"
+        :address => "10.0.0.13"
+      },
+      :external_ipv4 => {
+        :interface => "eth0.2800",
+        :role => :external,
+        :family => :inet,
+        :address => "193.60.236.16"
       }
     }
   }
 )
 
 run_list(
-  "role[firefishynet]"
+  "role[ucl]",
+  "role[hp-dl360-g6]"
 )