Limit NAT to IPv4 interfaces

[chef.git] / roles / ucl.rb

diff --git a/roles/ucl.rb b/roles/ucl.rb
index a0f5331f4a6c3c49ef44059e8481bd23b5cb2c2c..1bfa54c201c09383158ef85796f8bb7f98f1d5b5 100644 (file)
--- a/roles/ucl.rb
+++ b/roles/ucl.rb
@@ -4,6 +4,9 @@ description "Role applied to all servers at UCL"
 default_attributes(
   :location => "Slough, England",
   :networking => {
+    :firewall => {
+      :engine => "nftables"
+    },
     :roles => {
       :internal => {
         :inet => {
@@ -30,7 +33,7 @@ default_attributes(
 
 override_attributes(
   :networking => {
-    :nameservers => ["10.0.0.3", "1.1.1.1", "1.0.0.1"],
+    :nameservers => ["10.0.0.3", "8.8.8.8", "8.8.4.4"],
     :search => ["ucl.openstreetmap.org", "openstreetmap.org"]
   },
   :ntp => {