Enable wireguard on jakelong

[chef.git] / roles / iway.rb

diff --git a/roles/iway.rb b/roles/iway.rb
index ae10831e40ea86c4bcf1284853db82ac809cb9e7..3a4c1b888203001e401855ae611093a91b7eaa45 100644 (file)
--- a/roles/iway.rb
+++ b/roles/iway.rb
@@ -10,12 +10,21 @@ default_attributes(
   :hosted_by => "iWay",
   :location => "Zurich, Switzerland",
   :networking => {
-    :nameservers => ["2001:8e0:ffff:ac1::1", "8.8.8.8", "8.8.4.4"],
-    :roles => {
-      :external => {
-        :zone => "osm"
-      }
-    }
+    :firewall => {
+      :inet => [
+        {
+          :action => "ACCEPT",
+          :source => "net:212.25.24.64/28",
+          :dest => "fw",
+          :proto => "udp",
+          :dest_ports => "snmp",
+          :source_ports => "1024:",
+          :rate_limit => "-",
+          :connection_limit => "-"
+        }
+      ]
+    },
+    :nameservers => ["2001:8e0:ffff:ac1::1", "8.8.8.8", "8.8.4.4"]
   }
 )