StefanMewes/Nebula-Ansible-Role
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge branch 'master' into matt/hosts

Browse Source
This commit is contained in:
Matt Burchett
2021-10-15 22:52:39 -05:00
committed by GitHub
parent 24104f0480 a3aaa55c91
commit 7ebdb906a3
6 changed files with 16 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
README.md
View File

@@ -25,14 +25,12 @@ You can read more about Nebula [on the official repo](https://github.com/slackhq
nebula_lighthouse_public_hostname: lighthouse.company.com nebula_lighthouse_public_hostname: lighthouse.company.com
nebula_lighthouse_public_port: 4242 nebula_lighthouse_public_port: 4242
nebula_default_inbound_rules: nebula_inbound_rules:
- { port: 22, proto: "tcp", host: "any" }
- { port: "any", proto: "icmp", host: "any" } - { port: "any", proto: "icmp", host: "any" }
nebula_default_outbound_rules:
- { port: 22, proto: "tcp", host: "any" } - { port: 22, proto: "tcp", host: "any" }
- { port: "any", proto: "icmp", host: "any" } nebula_outbound_rules:
- { port: 4505, proto: "tcp", host: "10.43.0.1/32" } - { port: "any", proto: "any", host: "any" }
- { port: 4506, proto: "tcp", host: "10.43.0.1/32" }
roles: roles:
- role: nebula - role: nebula
``` ```

8
defaults/main.yml
View File

@@ -5,15 +5,17 @@ nebula_ca_cert_duration: "87600h0m0s" #10 years
nebula_client_cert_duration: "43800h0m0s" #5 years nebula_client_cert_duration: "43800h0m0s" #5 years
nebula_clean_install: false nebula_clean_install: false
nebula_lighthouse_build_hosts_file: true nebula_lighthouse_build_hosts_file: true
nebula_node_lighthouse_in_hosts_file: true nebula_node_lighthouse_in_hosts_file: true
nebula_install_check_cron: yes
nebula_lighthouse_hostname: lighthouse nebula_lighthouse_hostname: lighthouse
nebula_lighthouse_internal_ip_addr: 192.168.77.1 nebula_lighthouse_internal_ip_addr: 192.168.77.1
nebula_lighthouse_public_hostname: my-nebula-server.com nebula_lighthouse_public_hostname: my-nebula-server.com
nebula_lighthouse_public_port: 4242 nebula_lighthouse_public_port: 4242
nebula_default_inbound_rules: nebula_inbound_rules:
- { port: "any", proto: "any", host: "any" } - { port: "any", proto: "any", host: "any" }
nebula_default_outbound_rules: nebula_outbound_rules:
- { port: "any", proto: "any", host: "any" } - { port: "any", proto: "any", host: "any" }

2
tasks/main.yml
View File

@@ -3,7 +3,7 @@
block: block:
- name: Uninstall Nebula (clean install) - name: Uninstall Nebula (clean install)
include: uninstall.yml include: uninstall.yml
when: nebula_clean_install when: nebula_clean_install|bool
- name: Install Nebula on all hosts - name: Install Nebula on all hosts
include: nebula.yml include: nebula.yml

2
tasks/node.yml
View File

@@ -71,9 +71,11 @@
owner: root owner: root
group: root group: root
mode: '0755' mode: '0755'
when: nebula_install_check_cron|bool
- name: Ensure nebula-check is scheduled via cron - name: Ensure nebula-check is scheduled via cron
cron: cron:
name: "nebula-check" name: "nebula-check"
minute: "*/5" minute: "*/5"
job: "/opt/nebula/nebula-check.sh" job: "/opt/nebula/nebula-check.sh"
when: nebula_install_check_cron|bool

4
templates/lighthouse_config.yml.j2
View File

@@ -82,14 +82,14 @@ firewall:
# #
outbound: outbound:
{% for rule in nebula_default_outbound_rules %} {% for rule in nebula_outbound_rules %}
- port: {{ rule.port }} - port: {{ rule.port }}
proto: {{ rule.proto }} proto: {{ rule.proto }}
host: {{ rule.host }} host: {{ rule.host }}
{% endfor %} {% endfor %}
inbound: inbound:
{% for rule in nebula_default_outbound_rules %} {% for rule in nebula_inbound_rules %}
- port: {{ rule.port }} - port: {{ rule.port }}
proto: {{ rule.proto }} proto: {{ rule.proto }}
host: {{ rule.host }} host: {{ rule.host }}

4
templates/node_config.yml.j2
View File

@@ -82,14 +82,14 @@ firewall:
# #
outbound: outbound:
{% for rule in nebula_default_outbound_rules %} {% for rule in nebula_outbound_rules %}
- port: {{ rule.port }} - port: {{ rule.port }}
proto: {{ rule.proto }} proto: {{ rule.proto }}
host: {{ rule.host }} host: {{ rule.host }}
{% endfor %} {% endfor %}
inbound: inbound:
{% for rule in nebula_default_outbound_rules %} {% for rule in nebula_inbound_rules %}
- port: {{ rule.port }} - port: {{ rule.port }}
proto: {{ rule.proto }} proto: {{ rule.proto }}
host: {{ rule.host }} host: {{ rule.host }}