comparison manifests/nodes.pp @ 285:c0e989d32b5c

Go back to IPv6, not hostnames, for up-stream When applying with hostnames, we were getting DNS lookup issues
author IBBoard <dev@ibboard.co.uk>
date Sun, 16 Feb 2020 12:15:17 +0000
parents 9431aec4d998
children 51d3748f8112
comparison
equal deleted inserted replaced
284:9431aec4d998 285:c0e989d32b5c
17 } 17 }
18 node 'ibbvps.vs.mythic-beasts.com' { 18 node 'ibbvps.vs.mythic-beasts.com' {
19 class { 'ibboardvpsnode': 19 class { 'ibboardvpsnode':
20 primary_ip => '2a00:1098:82:52::1', 20 primary_ip => '2a00:1098:82:52::1',
21 proxy_4to6_ip_prefix => '2a00:1098:82:52::01d4', # ::old4 for IPv4! 21 proxy_4to6_ip_prefix => '2a00:1098:82:52::01d4', # ::old4 for IPv4!
22 proxy_upstream => ['proxy.mythic-beasts.com'], 22 proxy_upstream => ['2a00:1098::82:1000:3b:1:1', '2a00:1098::80:1000:3b:1:1'],
23 mailserver => 'mail.ibboard.co.uk', 23 mailserver => 'mail.ibboard.co.uk',
24 imapserver => 'imap.ibboard.co.uk', 24 imapserver => 'imap.ibboard.co.uk',
25 firewall_cmd => 'iptables', 25 firewall_cmd => 'iptables',
26 } 26 }
27 # If the console fails to start, you may need to run "restorecon /etc/systemd/system/getty.target.wants/*" 27 # If the console fails to start, you may need to run "restorecon /etc/systemd/system/getty.target.wants/*"
30 ensure => 'running', 30 ensure => 'running',
31 enable => 'true', 31 enable => 'true',
32 } 32 }
33 firewall { '090 Allow SSH (IPv4-to-IPv6)': 33 firewall { '090 Allow SSH (IPv4-to-IPv6)':
34 dport => 22, 34 dport => 22,
35 source => 'geryon.mythic-beasts.com', 35 source => '2a00:1098:0:82:1000:0:5d5d:826a',
36 proto => 'tcp', 36 proto => 'tcp',
37 action => 'accept', 37 action => 'accept',
38 } 38 }
39 } 39 }