From 3020de7dc18d3a7d68416d4bb95c09680f97ec81 Mon Sep 17 00:00:00 2001
From: pyrschtjag <pyrschtjag@gmail.com>
Date: Mon, 17 Aug 2026 06:49:15 +0000
Subject: [PATCH] change host_vars

---
 inventory/group_vars/all/xray_sets.yml    |  1 +
 inventory/host_vars/haproxy.yml           | 20 +++++++++++++++++++-
 inventory/host_vars/iphone11.yml          |  4 ++++
 inventory/host_vars/{nfs.yaml => nfs.yml} |  0
 inventory/host_vars/nginx.yml             |  3 +++
 inventory/host_vars/runner.yml            |  3 +++
 inventory/static.yml                      |  4 ++++
 7 files changed, 34 insertions(+), 1 deletion(-)
 create mode 100644 inventory/host_vars/iphone11.yml
 rename inventory/host_vars/{nfs.yaml => nfs.yml} (100%)

diff --git a/inventory/group_vars/all/xray_sets.yml b/inventory/group_vars/all/xray_sets.yml
index d128d00..2ed055d 100644
--- a/inventory/group_vars/all/xray_sets.yml
+++ b/inventory/group_vars/all/xray_sets.yml
@@ -43,6 +43,7 @@ xray_domain_sets:
       - rutracker.org
       - rutracker.net
       - tapochek.net
+      - bt.tapochek.net
       - nnmclub.to
       - rutor.info
       - bigfangroup.org
diff --git a/inventory/host_vars/haproxy.yml b/inventory/host_vars/haproxy.yml
index e172dc2..e669f93 100644
--- a/inventory/host_vars/haproxy.yml
+++ b/inventory/host_vars/haproxy.yml
@@ -1,4 +1,22 @@
 nft_to:
   - to: nginx
     proto: tcp
-    port: [80, 81, 443, 444, 24445]
+    port: [80,81,443,444,24445,5222,5223,5269,5000,5270,5280]
+  - to: coturn
+    proto: tcp
+    port: [3478,5349]
+  - to: coturn
+    proto: udp
+    port: [3478,5349,"49152-65535"]
+  - to: mcsmanager
+    proto: tcp
+    port: 25565
+  - to: steamcmd
+    proto: udp
+    port: [2456,2457]
+  - to: rbpi4
+    proto: tcp
+    port: "21114-21119"
+  - to: rbpi4
+    proto: udp
+    port: 21116 
diff --git a/inventory/host_vars/iphone11.yml b/inventory/host_vars/iphone11.yml
new file mode 100644
index 0000000..b8472c5
--- /dev/null
+++ b/inventory/host_vars/iphone11.yml
@@ -0,0 +1,4 @@
+xray_policy:
+  - bypass: private
+  - bypass: russian_whitelist
+  - proxy: all 
diff --git a/inventory/host_vars/nfs.yaml b/inventory/host_vars/nfs.yml
similarity index 100%
rename from inventory/host_vars/nfs.yaml
rename to inventory/host_vars/nfs.yml
diff --git a/inventory/host_vars/nginx.yml b/inventory/host_vars/nginx.yml
index 23686c7..dbc4c6c 100644
--- a/inventory/host_vars/nginx.yml
+++ b/inventory/host_vars/nginx.yml
@@ -35,6 +35,9 @@ nft_to:
   - to: bylampa
     proto: tcp
     port: 80
+  - to: mcsmanager
+    proto: tcp
+    port: [23333,24444]
 
 nft_from:
   - iface: [eth0,eth0.2]
diff --git a/inventory/host_vars/runner.yml b/inventory/host_vars/runner.yml
index cff3c78..7702a04 100644
--- a/inventory/host_vars/runner.yml
+++ b/inventory/host_vars/runner.yml
@@ -2,6 +2,9 @@ nft_to:
   - to: firebat
     proto: tcp
     port: [22, 8006]
+  - to: nginx 
+    proto: tcp
+    port: 443
 
 xray_policy:
   - proxy: terraform
diff --git a/inventory/static.yml b/inventory/static.yml
index 7b1e203..a48fae3 100644
--- a/inventory/static.yml
+++ b/inventory/static.yml
@@ -73,6 +73,10 @@ all:
           container_ip: "10.3.0.5"
           zone_iface: "eth0.3"
 
+        haproxy:
+          container_ip: "10.255.255.100"
+          zone_iface: "wg0"
+
         xiawrt:
           container_ip: "10.250.250.1"
           zone_iface: "wg0"