Use systemd-resolved stub resolver for nginx resolver

[chef.git] / roles / milkywan.rb

diff --git a/roles/milkywan.rb b/roles/milkywan.rb
index 529cc37b55fa5f3687ef8e2d3adfc7f7c0ef9ce6..d84cf531945097c7ae8b5fbf91b07b8c8963228e 100644 (file)
--- a/roles/milkywan.rb
+++ b/roles/milkywan.rb
@@ -8,9 +8,23 @@ default_attributes(
     }
   },
   :hosted_by => "MilkyWan",
     }
   },
   :hosted_by => "MilkyWan",

-  :location => "France",
+  :location => "Paris, France",

   :networking => {
   :networking => {

-    :nameservers => ["8.8.8.8", "2a0b:cbc0:42::42"],
+    :firewall => {
+      :inet => [
+        {
+          :action => "ACCEPT",
+          :source => "net:212.25.24.64/28",
+          :dest => "fw",
+          :proto => "udp",
+          :dest_ports => "snmp",
+          :source_ports => "1024:",
+          :rate_limit => "-",
+          :connection_limit => "-"
+        }
+      ]
+    },
+    :nameservers => ["130.117.11.11", "2a0b:cbc0:42::42"],

     :roles => {
       :external => {
         :zone => "osm"
     :roles => {
       :external => {
         :zone => "osm"