Limit access to only vpn towards monitoreidas, SC-2522

2025-04-04 16:06:19 +02:00 · 2025-04-04 16:06:19 +02:00 · 828a514968
commit 828a514968
parent f71a15dc58
1 changed files with 2 additions and 0 deletions
--- a/global/overlay/etc/puppet/cosmos-rules.yaml
+++ b/global/overlay/etc/puppet/cosmos-rules.yaml
@ -1250,6 +1250,8 @@ monitoreidas-prod-sto1-1.komreg.net:
   sunet::naemon_monitor:
      domain: monitor-eidas.komreg.net
      acme_protocol: acme-d
+      thruk_allow_clients:
+         - 130.242.121.23/32  # vpn1.sunet.se
      naemon_tag: latest
      thruk_tag: latest
      histou_tag: latest