dogeystamp 864c1bdfd3 haproxy, firewall, containers: force connections through bastion vpn ... docker is now listening on localhost, with a haproxy on the services server to forward the ports outwards. this is because docker tends to disregard UFW's rules, but haproxy should be better in that regard. meanwhile, the firewall rules have been configured properly to only allow the bastion IP in over the wireguard connection, for proper authentication.		2024-06-19 23:02:08 -04:00
..
defaults	wireguard: use vpn for bastion-fleet comms	2024-06-16 21:32:52 -04:00
tasks	haproxy, firewall, containers: force connections through bastion vpn	2024-06-19 23:02:08 -04:00