mirrors/blockstream-satellite-api
1
0
Fork 0
mirror of https://github.com/Blockstream/satellite-api.git synced 2025-02-22 13:42:33 +01:00
Code Issues Projects Releases Packages Wiki Activity

TF: move iptables 4500 rule to correct service

Browse source
This commit is contained in:
nitramiz 2021-07-20 06:55:57 -07:00 • committed by Blockstream Satellite
parent ff1081033c
commit c0c904d7ff
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
terraform/modules/blc/cloud-init/blc.yaml
View file

@ -227,7 +227,6 @@ write_files:
ExecStartPre=/usr/bin/docker-credential-gcr configure-docker
ExecStartPre=/usr/bin/docker pull ${ionosphere_docker}
ExecStartPre=/sbin/iptables -A INPUT -p tcp -s 10.138.0.0/16 --dport 9292 -j ACCEPT
ExecStartPre=/sbin/iptables -A INPUT -p tcp -s 10.138.0.0/16 --dport 4500 -j ACCEPT
ExecStart=/usr/bin/docker run \
--network=host \
--pid=host \
@ -244,7 +243,6 @@ write_files:
ExecStop=/usr/bin/docker stop api-server
ExecStopPost=/usr/bin/docker rm api-server
ExecStopPost=/sbin/iptables -D INPUT -p tcp -s 10.138.0.0/16 --dport 9292 -j ACCEPT
ExecStopPost=/sbin/iptables -D INPUT -p tcp -s 10.138.0.0/16 --dport 4500 -j ACCEPT
- path: /etc/systemd/system/sse-server.service
permissions: 0644
@ -261,6 +259,7 @@ write_files:
Environment=HOME=/home/bs
ExecStartPre=/usr/bin/docker-credential-gcr configure-docker
ExecStartPre=/usr/bin/docker pull ${ionosphere_sse_docker}
ExecStartPre=/sbin/iptables -A INPUT -p tcp -s 10.138.0.0/16 --dport 4500 -j ACCEPT
ExecStart=/usr/bin/docker run \
--network=host \
--pid=host \
@ -270,6 +269,7 @@ write_files:
"${ionosphere_sse_docker}"
ExecStop=/usr/bin/docker stop sse-server
ExecStopPost=/usr/bin/docker rm sse-server
ExecStopPost=/sbin/iptables -D INPUT -p tcp -s 10.138.0.0/16 --dport 4500 -j ACCEPT
- path: /etc/systemd/system/tx-server.service
permissions: 0644