Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/240083
Change subject: Enable ferm on tin
......................................................................
Enable ferm on tin
Port 80 is covered by the ferm service 'http_deployment_server'
Port 9102 is covered by ferm service 'bacula-file-demon' as included by
role::backup::host
Ports 6380 and 11212 for Nutracker only listen on localhost, port 22222
is only used for Diamond statistics collection and only used on
localhost as well (despite listening on 0.0.0.0, see T111934
Port 873 is covered by the ferm service 'rsyncd_scap_master'.
port 6379 is covered by the ferm service 'deployment-redis'.
(The actual merge still needs to be coordinated with releng)
Change-Id: I1bd6f3ff5c74edf5cf48cebae5475e68874a42b9
---
M manifests/site.pp
1 file changed, 1 insertion(+), 0 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/83/240083/1
diff --git a/manifests/site.pp b/manifests/site.pp
index 26b652c..beb3daa 100644
--- a/manifests/site.pp
+++ b/manifests/site.pp
@@ -2510,6 +2510,7 @@
role deployment::server
include standard
include role::labsdb::manager
+ include base::firewall
interface::add_ip6_mapped { 'main':
interface => 'eth0',
--
To view, visit https://gerrit.wikimedia.org/r/240083
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I1bd6f3ff5c74edf5cf48cebae5475e68874a42b9
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
