From 1f8d8b642c2cb56359fc11b8f78b14d94a4131ca Mon Sep 17 00:00:00 2001
From: Georg Pfuetzenreuter
Date: Sun, 12 Feb 2023 03:49:40 +0100
Subject: dericom02: manage web firewall zone

Import locally configured web zone into Salt. This zone allows the web
proxy to reach http for serving Matterbridge media.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
---
 pillar/id/dericom02_rigel_lysergic_dev.sls | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/pillar/id/dericom02_rigel_lysergic_dev.sls b/pillar/id/dericom02_rigel_lysergic_dev.sls
index 76a6348..4309cf9 100644
--- a/pillar/id/dericom02_rigel_lysergic_dev.sls
+++ b/pillar/id/dericom02_rigel_lysergic_dev.sls
@@ -232,3 +232,11 @@ profile:
       matterbridge-irc:
         host: 'libertacasa-irc\.matterbridge\.dericom02\.rigel\.lysergic\.dev'
         root: {{ mediapath }}libertacasa-irc
+
+firewalld:
+  zones:
+    web:
+      services:
+        - http
+      sources:
+        - '2a01:4f8:11e:2200::dead/128'
-- 
cgit v1.2.3