refactor(dns): set source of dns domain on fw.yaml

This commit is contained in:
il
2026-06-29 11:46:53 +09:00
parent 5ccb60bd2a
commit 88e85fff56
43 changed files with 606 additions and 406 deletions
@@ -6,10 +6,10 @@ whitelist:
# Console IP lists
- "127.0.0.1"
- "::1"
- "{{ hostvars['fw']['network4']['console']['client'] }}"
- "{{ hostvars['fw']['network4']['console']['wg'] }}"
- "{{ hostvars['fw']['network6']['console']['client'] }}"
- "{{ hostvars['fw']['network6']['console']['wg'] }}"
- "{{ hostvars['fw']['network']['console']['ipv4']['client'] }}"
- "{{ hostvars['fw']['network']['console']['ipv4']['wg'] }}"
- "{{ hostvars['fw']['network']['console']['ipv6']['client'] }}"
- "{{ hostvars['fw']['network']['console']['ipv6']['wg'] }}"
{% if node['name'] == 'auth' %}
expression:
# immich thumbnail request 404 error false positive
@@ -53,8 +53,8 @@ api:
trusted_ips: # IP ranges, or IPs which can have admin API access
- ::1
- 127.0.0.1
- {{ hostvars['fw']['network6']['subnet']['server'] }}
- {{ hostvars['fw']['network4']['subnet']['server'] }}
- {{ hostvars['fw']['network']['subnet']['ipv6']['server'] }}
- {{ hostvars['fw']['network']['subnet']['ipv4']['server'] }}
tls:
cert_file: /etc/crowdsec/ssl/crowdsec.crt
key_file: /etc/crowdsec/ssl/crowdsec.key