From 3e0644bc430ad08eef063a8d3b462c2d95621d1d Mon Sep 17 00:00:00 2001 From: Tom Hughes Date: Tue, 8 Aug 2023 19:35:08 +0100 Subject: [PATCH] Exempt OSM machines from HTTP rate limits --- cookbooks/networking/recipes/default.rb | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/cookbooks/networking/recipes/default.rb b/cookbooks/networking/recipes/default.rb index 60f3be444..cb4f741d9 100644 --- a/cookbooks/networking/recipes/default.rb +++ b/cookbooks/networking/recipes/default.rb @@ -395,6 +395,14 @@ if node[:networking][:wireguard][:enabled] end end +firewall_rule "accept-http-osm" do + action :accept + context :incoming + protocol :tcp + source :osm + dest_ports %w[http https] +end + firewall_rule "accept-http" do action :accept context :incoming -- 2.39.5