Murat ÖZDEMİR
03ad812512
Overhaul and expand firewall definitions for both `prod` and `test` environments to enable comprehensive inter-subnet communication. This includes implementing explicit rules supporting: - Docker Swarm overlay networks between application and database subnets. - High-availability database clusters (PostgreSQL replication, MongoDB replica sets, Patroni, etcd). - Internal access for various infrastructure services (Vault, Redis, RabbitMQ, APISIX, Prometheus, Grafana). All firewall rule descriptions are standardized in English for improved clarity and consistency. Additionally, update default `server_type_swarm` and `server_type_db` variables to the recommended `CPX` series for both environments. An initial generated Ansible inventory for the test environment is also added.
15 lines
349 B
YAML
15 lines
349 B
YAML
"all":
|
|
"children":
|
|
"db":
|
|
"hosts":
|
|
"iklim-db-01":
|
|
"ansible_host": "167.235.194.61"
|
|
"ansible_user": "root"
|
|
"private_ip": "10.10.20.11"
|
|
"swarm":
|
|
"hosts":
|
|
"iklim-app-01":
|
|
"ansible_host": "167.235.205.93"
|
|
"ansible_user": "root"
|
|
"private_ip": "10.10.10.11"
|