16 lines
579 B
Django/Jinja
16 lines
579 B
Django/Jinja
# If the bastion ipv4 or v6 addresses aren't available (because this
|
|
# job runs in an environment without them) just fall back to the
|
|
# defaults for the real bridge.
|
|
{% if bastion_ipv4 %}
|
|
bastion_ipv4: {{ bastion_ipv4 }}
|
|
{% endif %}
|
|
{% if bastion_ipv6 %}
|
|
bastion_ipv6: {{ bastion_ipv6 }}
|
|
{% endif %}
|
|
bastion_public_key: {{ bastion_public_key }}
|
|
force_docker_io_ipv4: true
|
|
iptables_test_public_tcp_ports: {{ iptables_test_public_tcp_ports }}
|
|
iptables_egress_rules:
|
|
- -o lo -j ACCEPT
|
|
- -p tcp -m tcp --dport 25 --tcp-flags FIN,SYN,RST,ACK SYN -j REJECT --reject-with tcp-reset
|