Fix nftables config of ams-slack-1

ooni · Jan 8, 2025 · 47af40a · 47af40a
1 parent 1b2e382
commit 47af40a
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/ansible/host_vars/ams-slack-1.ooni.org b/ansible/host_vars/ams-slack-1.ooni.org
@@ -0,0 +1,12 @@
+nft_rules_tcp:
+  - name: 22
+    rules:
+      - add rule inet filter input tcp dport 22 counter accept comment "Incoming SSH"
+  - name: 80
+    rules:
+      - add rule inet filter input tcp dport 80 counter accept comment "incoming HTTP"
+  - name: 443
+    rules:
+      - add rule inet filter input tcp dport 443 counter accept comment "incoming HTTPS"
+    - name: 9100
+       - add rule inet filter input ip saddr 5.9.112.244 tcp dport 9100 counter accept comment "clickhouse prometheus from monitoring.ooni.org"