d0e8f9f24e
Operator-approved playbooks/firewall.yaml --tags firewall removed the three public 6443 grants. Live UFW now matches ADR-005 (OpenSSH + Nydus).
9 lines
239 B
YAML
9 lines
239 B
YAML
---
|
|
# Firewall-only converge. Does not load SOPS secrets or other bootstrap roles.
|
|
# Usage: make converge-firewall HOST=Railiance01
|
|
- hosts: all
|
|
become: true
|
|
vars_files:
|
|
- ../inventory/group_vars/all.yaml
|
|
roles:
|
|
- role: base
|