Dzahn has submitted this change and it was merged.
Change subject: dumps::zim: open port 80 for http connections
......................................................................
dumps::zim: open port 80 for http connections
Node 'francium' has base::firewall and connections to port 80
must be allowed, at least from the dumps hosts, who proxy to this.
It has a private IP though so external clients already can't access it.
Want me to limit it to _only_ dataset1001 nevertheless?
Bug:T94457
Change-Id: Ic5e12fd3fcb130df9186823c1a1144d820e928bb
---
M manifests/role/dumps.pp
1 file changed, 6 insertions(+), 0 deletions(-)
Approvals:
jenkins-bot: Verified
Dzahn: Looks good to me, approved
diff --git a/manifests/role/dumps.pp b/manifests/role/dumps.pp
index 12e9289..72e711e 100644
--- a/manifests/role/dumps.pp
+++ b/manifests/role/dumps.pp
@@ -18,5 +18,11 @@
system::role { 'dumps::zim': description => 'ZIM dumps' }
include ::dumps::zim
+
+ ferm::service { 'zim_dumps_http':
+ proto => 'tcp',
+ port => '80',
+ }
+
}
--
To view, visit https://gerrit.wikimedia.org/r/204649
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: Ic5e12fd3fcb130df9186823c1a1144d820e928bb
Gerrit-PatchSet: 2
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Dzahn <[email protected]>
Gerrit-Reviewer: Alexandros Kosiaris <[email protected]>
Gerrit-Reviewer: ArielGlenn <[email protected]>
Gerrit-Reviewer: Dzahn <[email protected]>
Gerrit-Reviewer: GWicke <[email protected]>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
