bastian/deploy_home
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fixed subnets, drone proto & host, cleaned up vault

Browse Source
This commit is contained in:
Bastian de Byl
2022-10-06 20:50:05 -04:00
parent 50470a25d7
commit 5d12d516ae
12 changed files with 27 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
ansible/roles/podman/defaults/main.yml
View File

@@ -9,8 +9,8 @@ partkeepr_path: "{{ podman_volumes }}/partkeepr"
photos_path: "{{ podman_volumes }}/photos"
pihole_path: "{{ podman_volumes }}/pihole"
drone_server_proto: "https"
drone_runner_capacity: "4"
drone_server_proto: "http"
drone_runner_capacity: "8"
# nginx and modsec configuration
assistant_server_name: assistant.bdebyl.net
@@ -36,10 +36,10 @@ crs_path: "{{ install_path }}/coreruleset"
crs_rules_path: "{{ crs_path }}/rules"
modsec_whitelist_local_re: >-
^SecRule.*REMOTE_ADDR.*192\.168\.1\.1/24.*$
^SecRule.*REMOTE_ADDR.*192\.168\.0\.0/16.*$
modsec_whitelist_local: >-
SecRule REMOTE_ADDR "@ipMatch 192.168.1.1/24"
SecRule REMOTE_ADDR "@ipMatch 192.168.0.0/16"
"id:1,phase:1,nolog,allow,ctl:ruleEngine=Off"
modsec_git_urls: