Use a common set of default resolvers, defaulting to cloudflare

[chef.git] / roles / iway.rb

diff --git a/roles/iway.rb b/roles/iway.rb
index ae10831e40ea86c4bcf1284853db82ac809cb9e7..094f92b0b6b76288bfbec2ddab4966ba071a5514 100644 (file)
--- a/roles/iway.rb
+++ b/roles/iway.rb
@@ -10,11 +10,19 @@ default_attributes(
   :hosted_by => "iWay",
   :location => "Zurich, Switzerland",
   :networking => {
-    :nameservers => ["2001:8e0:ffff:ac1::1", "8.8.8.8", "8.8.4.4"],
-    :roles => {
-      :external => {
-        :zone => "osm"
-      }
+    :firewall => {
+      :inet => [
+        {
+          :action => "ACCEPT",
+          :source => "net:212.25.24.64/28",
+          :dest => "fw",
+          :proto => "udp",
+          :dest_ports => "snmp",
+          :source_ports => "1024:",
+          :rate_limit => "-",
+          :connection_limit => "-"
+        }
+      ]
     }
   }
 )