Dzahn has uploaded a new change for review.
https://gerrit.wikimedia.org/r/325079
Change subject: phab2001: allow rsync from iridium over IPv6 too
......................................................................
phab2001: allow rsync from iridium over IPv6 too
Another follow-up to Change-Id Iff3b06395a614982,
we need to add the same ferm rule for IPv6 that we
added for IPv4 or we can't rsync yet since IPv6 is
preferred.
Bug: T137928
Change-Id: I354597803ff9e0320b92156adac16ba78bedf3a4
---
M modules/role/manifests/phabricator/rsync.pp
1 file changed, 4 insertions(+), 2 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/79/325079/1
diff --git a/modules/role/manifests/phabricator/rsync.pp
b/modules/role/manifests/phabricator/rsync.pp
index 4d165da..7f1789f 100644
--- a/modules/role/manifests/phabricator/rsync.pp
+++ b/modules/role/manifests/phabricator/rsync.pp
@@ -5,12 +5,14 @@
$phabricator_active_server_fqdn = hiera('phabricator_active_server_fqdn')
if $::fqdn != $phabricator_active_server_fqdn {
- $hosts_allow_ferm = "@resolve((${phabricator_active_server_fqdn}))"
+
+ $hosts_allow_ferm_v4 = "@resolve((${phabricator_active_server_fqdn}))"
+ $hosts_allow_ferm_v6 = "@resolve((${phabricator_active_server_fqdn}),
AAAA)"
ferm::service { 'phabricator-repo-rsync':
proto => 'tcp',
port => '873',
- srange => $hosts_allow_ferm,
+ srange => "({$hosts_allow_ferm_v4 $hosts_allow_ferm_v6})",
}
include rsync::server
--
To view, visit https://gerrit.wikimedia.org/r/325079
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I354597803ff9e0320b92156adac16ba78bedf3a4
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Dzahn <dz...@wikimedia.org>
_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
