Skip to content

Conversation

@jaredhaight
Copy link

This updates the security group for the exit nodes to only allow inbound traffic from the public and private ips of the control server.

This PR is based on all of the PRs I've submitted so far because I'm dumb and don't know how to use git properly. There's a lot of changes here that are just part of previous PRs. Let me know if you want me to clean this up and I'll be happy to resubmit.

Relevant file changes are

  • /nodes/aws/variables.tf - Add the inboundips variable
  • /nodes/aws/main.tf - change firewall rule to use inboundips variable
  • /setup/install.sh - Get public and private ips from AWS metadata and put them in variables.tf (lines 37- 40)

Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants