require "ipaddr"
node[:networking][:interfaces].each do |name, interface|
- if interface[:role] && role = node[:networking][:roles][interface[:role]]
+ if interface[:role] && (role = node[:networking][:roles][interface[:role]])
if role[interface[:family]]
node.set[:networking][:interfaces][name][:prefix] = role[interface[:family]][:prefix]
node.set[:networking][:interfaces][name][:gateway] = role[interface[:family]][:gateway]
rate_limit "s:1/sec:5"
end
-%w(ucl ic bm).each do |zone|
+%w(ucl ic bm aws).each do |zone|
firewall_rule "accept-openvpn-#{zone}" do
action :accept
family :inet