refactor: restructure inventory, split roles and add new services

2026-09-07 19:50:34 +00:00
parent 33ddc88ee9
commit ba9e1a664f
114 changed files with 1117 additions and 418 deletions
@@ -1,4 +1,7 @@
 nft_to:
+  - to: nginx
+    proto: tcp
+    port: [80,443]
  - to: nfs
    proto: [tcp,udp]
    port: [2049,111,32765,32767]
@@ -9,7 +12,23 @@ nft_to:
    proto: tcp
    port: 22

+nft_dst:
+  - iface: eth1
+    proto: tcp
+    port: [3783,4321,28900,29900,29901]
+  - iface: eth1
+    proto: udp
+    port: [6500,6515,13139,27900]
+
+nft_from:
+  - iface: eth1
+    proto: tcp
+    port: [3783,4321,28900,29900,29901]
+  - iface: eth1
+    proto: udp
+    port: [6500,6515,13139,27900]
+
 xray_policy:
  - bypass: private
  - bypass: russian_whitelist
-  - proxy: all 
+  - proxy: all