viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add modsecurity waf to ingress with some blacklisted ips [ci skip]

Browse source
This commit is contained in:
Viktor Barzin 2023-11-18 18:38:59 +00:00
parent dc565c4d87
commit b7fc4fd8f0
No known key found for this signature in database
GPG key ID: 4056458DBDBF8863
6 changed files with 344 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

3
main.tf
View file

@ -56,6 +56,7 @@ variable "finance_app_gocardless_secret_key" {}
variable "finance_app_gocardless_secret_id" {}
variable "headscale_config" {}
variable "immich_postgresql_password" {}
variable "ingress_honeypotapikey" {}
variable "ansible_prefix" {
default = "ANSIBLE_VAULT_PASSWORD_FILE=~/.ansible/vault_pass.txt ansible-playbook -i playbook/hosts.yaml playbook/linux.yml -t linux/initial_setup"
@ -280,6 +281,8 @@ module "kubernetes_cluster" {
headscale_config = var.headscale_config
immich_postgresql_password = var.immich_postgresql_password
ingress_honeypotapikey = var.ingress_honeypotapikey
}