Comments (2)
If you use both roles (or the DebOps playbook), easier way to use them would be use debops.sshd
role to configure ssh
service. With that role, you can set ssh_allow
list (or ssh_group_allow
/ ssh_host_allow
) which in turn configures both ferm and tcpwrappers at the same time. *_ansible_controllers
variables are meant to be used when ferm or tcpwrappers roles are used separately from rest of the DebOps roles.
As for tcpwrappers active specifically with ssh - at the moment debops.ferm
role allows limited ssh
access (too many connections in a specified time period and the host is blocked). But because debops.tcpwrappers
lacks similar feature, use of both was cumbersome. I've deisgned a way to automatically allow access from all hosts in tcpwrappers, similar to what ferm does - it will be merged later in the day. After that, if you don't specify any hosts/networks in ssh_*_allow
lists, access to ssh
service in tcpwrappers will be allowed from all hosts by default.
debops_*
variable namespace is already taken by debops.debops
role, but I'm thinking of doing something similar as in debops.ansible
role - change the name of variables to role_debops_*
and reseve debops_*
namespace specifically for playbooks / global variables. If you want to define global variables in inventory to use them in multiple roles without conflicts, I would use inventory_*
namespace.
from debops-playbooks.
Thanks for the explanation. I just added a comment to both roles to make this clear.
In my case I ran both roles separately, because I stepped into problems (which I reported) when trying to run debops.
from debops-playbooks.
Related Issues (20)
- SolrCloud playbook
- Proposed role: debops.rtfd HOT 2
- DNS-Privacy - GetDNS &Co
- fail2ban error message --reject-with icmp-admin-prohibited
- What is the problem with apex domain naming? HOT 2
- Qubes OS support HOT 5
- Add variable to disable Ansible security check HOT 3
- - include: custom.yml in site.yml HOT 1
- 'sshd__permit_root_login' not taking effect HOT 4
- [Question] What software was used to generate a dependency graph? HOT 2
- Comment macros in debops__tpl_macros.j2 HOT 1
- Stretch support status HOT 4
- new role for "limesurvey" HOT 3
- Incompatible Ansible version detected on Stretch HOT 3
- debops inserts wrong/faulty apt sources (Ansible ppa) on xenial HOT 2
- Pre/post hook tasks do not process included tasks HOT 1
- Merge all DebOps git repositories into one HOT 1
- Using DebOps ansible roles to manage users HOT 2
- README.md - Dependency graph not found HOT 1
- Record a video HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from debops-playbooks.