Ryan Lane has uploaded a new change for review. https://gerrit.wikimedia.org/r/114431
Change subject: Add http/https to ferm rules on wikitech ...................................................................... Add http/https to ferm rules on wikitech Change-Id: If8ea4d161aa3ee6ff3cf7cedfd7fff48999c3bc3 --- M manifests/openstack.pp 1 file changed, 5 insertions(+), 0 deletions(-) git pull ssh://gerrit.wikimedia.org:29418/operations/puppet refs/changes/31/114431/1 diff --git a/manifests/openstack.pp b/manifests/openstack.pp index 069fd78..141f595 100644 --- a/manifests/openstack.pp +++ b/manifests/openstack.pp @@ -12,6 +12,11 @@ $other_master = '208.80.152.32' } + # Wikitech HTTP/HTTPS + ferm::rule { 'http_public': + rule => 'saddr (0.0.0.0/0) proto tcp dport (http https) ACCEPT;', + } + # LDAP ferm::rule { 'ldap_private_labs': rule => 'saddr (10.0.0.0/8 208.80.152.0/22) proto tcp dport (ldap ldaps) ACCEPT;', -- To view, visit https://gerrit.wikimedia.org/r/114431 To unsubscribe, visit https://gerrit.wikimedia.org/r/settings Gerrit-MessageType: newchange Gerrit-Change-Id: If8ea4d161aa3ee6ff3cf7cedfd7fff48999c3bc3 Gerrit-PatchSet: 1 Gerrit-Project: operations/puppet Gerrit-Branch: production Gerrit-Owner: Ryan Lane <rl...@wikimedia.org> _______________________________________________ MediaWiki-commits mailing list MediaWiki-commits@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits