akadmin/Funk-lab
1
0
Fork 0
mirror of https://github.com/Alkatrazz24/Funk-lab.git synced 2026-07-08 07:54:42 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

ajout de linterface hermes + route

Browse source
This commit is contained in:
alkatrazz 2026-05-12 18:01:50 +02:00
parent 5615ead566
commit 572e949ce4
5 changed files with 60 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

10
ansible/roles/gateway/templates/nftables.conf.j2
View file

@ -34,6 +34,9 @@ table inet filter {
# Hermes gateway (accès LAN domestique + cluster)
tcp dport 8080 ip saddr { 192.168.1.0/24, 192.168.10.0/24 } accept
# Hermes dashboard (poste admin uniquement)
tcp dport 9119 ip saddr {{ hermes_dashboard_allowed_ip }} accept
# LiteLLM (localhost uniquement — pas d'accès réseau direct)
# Port 4000 non exposé ici intentionnellement
@ -43,8 +46,13 @@ table inet filter {
chain forward {
type filter hook forward priority 0; policy drop;
# Forwarding LAN cluster → WAN
# Forwarding LAN cluster → WAN (NAT sortant)
iif {{ lan_interface }} oif {{ wan_interface }} ct state new,established,related accept
# Forwarding LAN domestique → LAN cluster (accès admin depuis le poste perso)
iif {{ wan_interface }} oif {{ lan_interface }} ip saddr 192.168.1.0/24 ct state new,established,related accept
# Réponses WAN → cluster (connexions initiées depuis le cluster)
iif {{ wan_interface }} oif {{ lan_interface }} ct state established,related accept
}