summaryrefslogtreecommitdiff
path: root/firewall.yaml
Commit message (Collapse)AuthorAgeFilesLines
* firewall.yml: Remove internal-only security group, which nothing usessam/cleanupSam Thursfield2017-07-121-50/+0
|
* README.mdwn: Remove MasonsSam Thursfield2017-07-121-54/+0
| | | | | | These are obsolete, see: https://listmaster.pepperfish.net/pipermail/baserock-dev-baserock.org/2017-January/013765.html
* Add 'internal-only' security groupSam Thursfield2015-05-121-0/+50
| | | | | | | | | | | | This can be used instead of 'default' where you want to prevent a system from connecting to the outside world. I have switched mason-x86-32.baserock.org and mason-x86-64.baserock.org to use this security group instead of 'default', so that they will fail to build anything that tries to fetch source code from places other than git.baserock.org. Change-Id: I63cb398bff63ff1e381d4903311a9eb63678ffd8
* firewall: Allow internal machines to use the Masons as distbuild controllersSam Thursfield2015-05-081-0/+11
| | | | Change-Id: I84ddf212a615d26aa94fbfd85437be308eed4a84
* Add simple mail relay instanceSam Thursfield2015-03-261-0/+20
| | | | | | This is a Fedora Cloud 21 instance running exim4, for the moment. Change-Id: I6298a134bb474c65dd57a1bda87469dc3cd88441
* firewall: Add a security group for x86 MasonsSam Thursfield2015-03-111-13/+43
| | | | | We need to open port 8080 for cache.baserock.org, so it can fetch artifacts from them. This was causing the Masons to fail to build.
* firewall: Allow outgoing ICMPSam Thursfield2015-03-101-0/+7
| | | | Now instances can use 'ping'!
* firewall: Fix rule for Gerrit SSH portSam Thursfield2015-03-091-2/+2
|
* Add initial firewall rulesSam Thursfield2015-03-091-0/+285
In the form of ... an Ansible playbook! Requires https://github.com/openstack-ansible/openstack-ansible-modules