Allow ssh on port 45222

diff --git a/cookbooks/openssh/attributes/default.rb b/cookbooks/openssh/attributes/default.rb
new file mode 100644 (file)
index 0000000..d829ee2
--- /dev/null
+++ b/cookbooks/openssh/attributes/default.rb
@@ -0,0 +1 @@
+default[:openssh][:port] = 22

diff --git a/cookbooks/openssh/recipes/default.rb b/cookbooks/openssh/recipes/default.rb
index 08d1aded8fe3408bbcac83594f7b867859ef42de..b69a86a51ffbd97ac5f3669e927bbe246e3636c6 100644 (file)
--- a/cookbooks/openssh/recipes/default.rb
+++ b/cookbooks/openssh/recipes/default.rb
@@ -85,5 +85,5 @@ firewall_rule "accept-ssh" do
   source "net"
   dest "fw"
   proto "tcp:syn"
-  dest_ports "ssh"
+  dest_ports node[:openssh][:port]
 end

diff --git a/roles/cherufe.rb b/roles/cherufe.rb
index ebf272e46749ec2549746ee42e743db1905fe192..703d23e80a927c959e2b3c0b0f12b8f634e3ea92 100644 (file)
--- a/roles/cherufe.rb
+++ b/roles/cherufe.rb
@@ -14,6 +14,9 @@ default_attributes(
       }
     }
   },
+  :openssh => {
+    :port => 45222
+  },
   :squid => {
     :cache_mem => "6000 MB",
     :cache_dir => "coss /store/squid/coss-01 128000 block-size=8192 max-size=262144 membufs=80"