scip/bsdnix
1
0
Fork 0
Code Issues Pull Requests Activity

fixes:

Browse Source 
- finally fixed pf.conf
- got Bastillefile working (sshd_config missing yet)
- re-activated network role to set net variables
- fixed make [all]
- use hetzner volume for jail home
- use ramdisk for /tmp inside jail
This commit is contained in:
Thomas von Dein
2024-11-21 19:38:55 +01:00
parent dd2714d315
commit 480111eed7
11 changed files with 59 additions and 57 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
roles/jails/tasks/main.yaml
View File

@@ -37,10 +37,6 @@
regexp: '^(.*)quarterly(.*)$'
replace: '\1latest\2'
- name: determine ipv6 address
shell: ifconfig {{ netif.primary }} inet6 | awk '{ if (/2a01/) { print $2 }}'
register: primaryip
- name: setup bastille.conf
template:
src: bastille.conf.j2

2
roles/jails/templates/bastille.conf.j2
View File

@@ -57,7 +57,7 @@ bastille_network_pf_ext_if="ext_if" ## default
bastille_network_pf_table="jails" ## default: "jails"
bastille_network_shared="" ## default: ""
bastille_network_gateway="" ## default: ""
bastille_network_gateway6="{{ primaryip.stdout }}" ## default: ""
bastille_network_gateway6="{{ jailip.stdout }}" ## default: ""
## Default Templates
bastille_template_base="default/base" ## default: "default/base"