2martens/terraform
1
0
Fork 0
mirror of https://github.com/2martens/terraform.git synced 2026-10-17 19:46:52 +02:00
Code Issues Activity

Added metrics endpoint to ufw allow list

Browse Source
This commit is contained in:
2martens
2023-11-01 23:31:47 +01:00
parent 6dff1d4241
commit fa5a818e7f
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
terraform/templates/cloud-init-k8s.tftpl
+2 -1
View File
@@ -15,9 +15,10 @@ runcmd:
- printf "[sshd]\nenabled = true\nbanaction = iptables-multiport" > /etc/fail2ban/jail.local
- systemctl enable fail2ban
- ufw allow OpenSSH
- ufw allow 16443 comment Kubernetes
- ufw allow 16443 comment "Kubernetes API endpoint"
- ufw allow 80 comment HTTP
- ufw allow 443 comment HTTPS
- ufw allow to ${node_ip} port 9100 comment "Metrics endpoint"
- ufw enable
- sed -i -e '/^\(#\|\)PermitRootLogin/s/^.*$/PermitRootLogin no/' /etc/ssh/sshd_config
- sed -i -e '/^\(#\|\)PasswordAuthentication/s/^.*$/PasswordAuthentication no/' /etc/ssh/sshd_config