From: Tom Hughes <tom@compton.nu>
Date: Tue, 25 Sep 2018 15:28:46 +0000 (+0100)
Subject: Allow ssh on port 45222
X-Git-Url: https://git.openstreetmap.org/chef.git/commitdiff_plain/d626103e52cc24d2e5e0f4d67bc46be86e0f6ce9

Allow ssh on port 45222
---

diff --git a/cookbooks/openssh/attributes/default.rb b/cookbooks/openssh/attributes/default.rb
new file mode 100644
index 000000000..d829ee259
--- /dev/null
+++ b/cookbooks/openssh/attributes/default.rb
@@ -0,0 +1 @@
+default[:openssh][:port] = 22
diff --git a/cookbooks/openssh/recipes/default.rb b/cookbooks/openssh/recipes/default.rb
index 08d1aded8..b69a86a51 100644
--- a/cookbooks/openssh/recipes/default.rb
+++ b/cookbooks/openssh/recipes/default.rb
@@ -85,5 +85,5 @@ firewall_rule "accept-ssh" do
   source "net"
   dest "fw"
   proto "tcp:syn"
-  dest_ports "ssh"
+  dest_ports node[:openssh][:port]
 end
diff --git a/roles/cherufe.rb b/roles/cherufe.rb
index ebf272e46..703d23e80 100644
--- a/roles/cherufe.rb
+++ b/roles/cherufe.rb
@@ -14,6 +14,9 @@ default_attributes(
       }
     }
   },
+  :openssh => {
+    :port => 45222
+  },
   :squid => {
     :cache_mem => "6000 MB",
     :cache_dir => "coss /store/squid/coss-01 128000 block-size=8192 max-size=262144 membufs=80"