Dzahn has uploaded a new change for review. ( 
https://gerrit.wikimedia.org/r/365434 )

Change subject: smokeping: restrict http access to prod networks
......................................................................

smokeping: restrict http access to prod networks

smokeping is behind cache::misc so it doesn't need to
talk http to everything anymore.

Change-Id: Iaffef289242d93aeed3e605c990543300216a562
---
M modules/role/manifests/smokeping.pp
1 file changed, 3 insertions(+), 2 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/34/365434/1

diff --git a/modules/role/manifests/smokeping.pp 
b/modules/role/manifests/smokeping.pp
index 26dca9b..cd37702 100644
--- a/modules/role/manifests/smokeping.pp
+++ b/modules/role/manifests/smokeping.pp
@@ -7,8 +7,9 @@
     include ::smokeping::web
 
     ferm::service { 'smokeping-http':
-        proto => 'tcp',
-        port  => '80',
+        proto  => 'tcp',
+        port   => '80',
+        srange => '$PRODUCTION_NETWORKS',
     }
 
     backup::set {'smokeping': }

-- 
To view, visit https://gerrit.wikimedia.org/r/365434
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: Iaffef289242d93aeed3e605c990543300216a562
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Dzahn <dz...@wikimedia.org>

_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to