Add pterodactyl rules

This commit is contained in:
LinuxSquare 2024-11-18 20:46:29 +01:00
parent 3a5d9bc778
commit 8df43c3391
2 changed files with 19 additions and 1 deletions

View file

@ -0,0 +1,10 @@
## This file is managed by Ansible
#!/usr/sbin/nft
table ip nat {
chain DOCKER {}
}
table ip filter {
chain DOCKER {}
}

View file

@ -20,7 +20,15 @@
group: root
mode: '0600'
vars:
ALLOWED_PORTS: [80, 443, 25565, 51871]
ALLOWED_PORTS: [80, 443]
- name: Additional pterodactyl rules
template:
src: files/firewall_pterodactyl-rules.j2
dest: /etc/nftables.d/pterodactyl.nft
owner: root
group: root
mode: '0600'
when: installation_type == 'gaming'
- name: Enable nftables service
service:
name: nftables