From: Peter Palfrader <peter@palfrader.org>
Date: Tue, 7 Sep 2010 20:31:42 +0000 (+0200)
Subject: allow ssh to geo[123] from orff
X-Git-Url: https://git.donarmstrong.com/?a=commitdiff_plain;h=6d43335dee4250b017a9c850b0746c44bba60c7c;p=dsa-puppet.git

allow ssh to geo[123] from orff
---

diff --git a/modules/ferm/templates/me.conf.erb b/modules/ferm/templates/me.conf.erb
index 3018fb53..f1f9ad15 100644
--- a/modules/ferm/templates/me.conf.erb
+++ b/modules/ferm/templates/me.conf.erb
@@ -27,6 +27,10 @@ if %w{bartok beethoven}.include?(hostname) then
 	ssh4allowed << '$HOST_DEBIAN_V4'
 	ssh6allowed << '$HOST_DEBIAN_V6'
 end
+if %w{geo1 geo2 geo3}.include?(hostname) then
+	ssh4allowed << '194.177.211.209' # orff - master
+	ssh6allowed << '2001:648:2ffc:deb:213:72ff:fe69:e188' # orff - master
+end
 ssh4allowed.length == 0 and ssh4allowed << '0.0.0.0/0'
 ssh6allowed.length == 0 and ssh6allowed << '::/0'