Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/227968
Change subject: Add ferm rules for rcstream
......................................................................
Add ferm rules for rcstream
Bug: T104981
The rcstream instances only bind to local host and redis is also only
accessed from localhost.
Change-Id: I599a6de4650dd9c0b3f2adc5d59524095f274c72
---
M manifests/role/rcstream.pp
1 file changed, 12 insertions(+), 0 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/68/227968/1
diff --git a/manifests/role/rcstream.pp b/manifests/role/rcstream.pp
index 823f35e..cddc060 100644
--- a/manifests/role/rcstream.pp
+++ b/manifests/role/rcstream.pp
@@ -51,6 +51,18 @@
diamond::collector::nginx { 'rcstream': }
+ ferm::service { 'rcstream':
+ proto => 'tcp',
+ port => '80',
+ srange => '$INTERNAL',
+ }
+
+ ferm::service { 'rcstream_ssl':
+ proto => 'tcp',
+ port => '443',
+ srange => '$INTERNAL',
+ }
+
diamond::collector { 'RCStream':
source => 'puppet:///modules/rcstream/diamond_collector.py',
settings => {
--
To view, visit https://gerrit.wikimedia.org/r/227968
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I599a6de4650dd9c0b3f2adc5d59524095f274c72
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
