]> git.openstreetmap.org Git - chef.git/commitdiff
Exempt OSM machines from HTTP rate limits
authorTom Hughes <tom@compton.nu>
Tue, 8 Aug 2023 18:35:08 +0000 (19:35 +0100)
committerTom Hughes <tom@compton.nu>
Tue, 8 Aug 2023 18:35:08 +0000 (19:35 +0100)
cookbooks/networking/recipes/default.rb

index 60f3be44481bcd9365e2c7f4acd8c62761a8780b..cb4f741d9406fb131d15abdf201dae5e6e686eaa 100644 (file)
@@ -395,6 +395,14 @@ if node[:networking][:wireguard][:enabled]
   end
 end
 
+firewall_rule "accept-http-osm" do
+  action :accept
+  context :incoming
+  protocol :tcp
+  source :osm
+  dest_ports %w[http https]
+end
+
 firewall_rule "accept-http" do
   action :accept
   context :incoming