nuno revised this gist 1 month ago. Go to revision
1 file changed, 44 insertions
gistfile1.txt(file created)
| @@ -0,0 +1,44 @@ | |||
| 1 | + | Identity: nuno | |
| 2 | + | Policy: default | |
| 3 | + | Rules: admin, user | |
| 4 | + | Strict rule: no | |
| 5 | + | Auto apply: yes | |
| 6 | + | Peers: 3 | |
| 7 | + | ||
| 8 | + | ── Peers (3) ──────────────────────────── | |
| 9 | + | ||
| 10 | + | · laptop-nuno laptop — offline | |
| 11 | + | · phone-nuno phone — online | |
| 12 | + | · tablet-nuno tablet — offline | |
| 13 | + | ||
| 14 | + | ── Rules ────────────────────────────────────── | |
| 15 | + | ||
| 16 | + | · identity:nuno | |
| 17 | + | ↳ admin | |
| 18 | + | full access (no restrictions) | |
| 19 | + | ||
| 20 | + | ↳ user | |
| 21 | + | ↳ no-proxmox | |
| 22 | + | - 10.0.0.101/32 → npm | |
| 23 | + | - 10.0.0.100/32 → proxmox | |
| 24 | + | ||
| 25 | + | ↳ dns-restricted | |
| 26 | + | + 10.0.0.103:53:udp → pihole:dns-udp | |
| 27 | + | + 10.0.0.103:53:tcp → pihole:dns-tcp | |
| 28 | + | - 10.0.0.103/32 → pihole | |
| 29 | + | ||
| 30 | + | Own: | |
| 31 | + | - 10.0.0.100:8006:tcp → proxmox:web-ui | |
| 32 | + | - 10.0.0.105:8007:tcp → pbs:web-ui | |
| 33 | + | - 10.0.0.210:9000:tcp → docker:portainer | |
| 34 | + | ||
| 35 | + | ── Firewall (+2 -6) ──────────────────────────── | |
| 36 | + | ||
| 37 | + | ACCEPT → pihole:dns-udp | |
| 38 | + | ACCEPT → pihole:dns-tcp | |
| 39 | + | DROP → npm | |
| 40 | + | DROP → proxmox | |
| 41 | + | DROP → pihole | |
| 42 | + | DROP → proxmox:web-ui | |
| 43 | + | DROP → pbs:web-ui | |
| 44 | + | DROP → docker:portainer | |
Newer
Older