Files @ a718023f9e76
Branch filter:

Location: majic-ansible-roles/roles/backup_server/templates/ferm_backup.conf.j2 - annotation

branko
MAR-181: Drop support for Debian 9 Stretch from the backup_client role:

- Provide more details on use of pexpect+sftp backed for
Duplicity (backend has to be used on Debian 10 Buster as well, not
just Debian 9 Stretch).
- Switch to using IPs from VirtualBox default allowed host-only
network subnets.
{% if backup_clients -%}
domain (ip ip6) {
    table filter {
        chain INPUT {
            saddr ({% for client in backup_clients %} {{ client.ip }}{% endfor %}) @subchain "backup_in" {
                # SSH
                proto tcp dport 2222 ACCEPT;
            }
        }
    }
}
{%- endif %}