initial commit

This commit is contained in:
2026-08-16 23:16:49 +00:00
commit 2dc83c0626
67 changed files with 1176 additions and 0 deletions
+4
View File
@@ -0,0 +1,4 @@
nft_to:
- to: [workuter,oyacoi-odcm]
proto: tcp
port: 5000
+3
View File
@@ -0,0 +1,3 @@
dnsmasq:
- name: asf.oyacoi.ru
ip: 10.10.0.2
+3
View File
@@ -0,0 +1,3 @@
dnsmasq:
- name: bananawrt.oyacoi.ru
ip: 10.10.0.2
+3
View File
@@ -0,0 +1,3 @@
dnsmasq:
- name: bylampa.oyacoi.ru
ip: 10.10.0.2
+4
View File
@@ -0,0 +1,4 @@
nft_from:
- iface: [eth1,eth0.2]
to: camera0
proto: [tcp,udp]
+12
View File
@@ -0,0 +1,12 @@
nft_dst:
- iface: [eth0,eth0.2]
proto: [tcp,udp]
port: [3478,5349]
nft_from:
- iface: [eth0,eth0.2,eth0.3,eth0.4,wg0]
proto: [tcp,udp]
port: [3478,5349]
- iface: [eth0,eth0.2,eth0.3,eth0.4,wg0]
proto: udp
port: ["49152-65535"]
+3
View File
@@ -0,0 +1,3 @@
dnsmasq:
- name: proxmox.oyacoi.ru
ip: 10.10.0.2
+8
View File
@@ -0,0 +1,8 @@
nft_from:
- iface: wg0
proto: tcp
port: 22
dnsmasq:
- name: gitea.oyacoi.ru
ip: 10.10.0.2
+4
View File
@@ -0,0 +1,4 @@
nft_to:
- to: nginx
proto: tcp
port: [80, 81, 443, 444, 24445]
+3
View File
@@ -0,0 +1,3 @@
dnsmasq:
- name: jellyfin.oyacoi.ru
ip: 10.10.0.2
+13
View File
@@ -0,0 +1,13 @@
nft_dst:
- iface: [eth0,eth0.2]
proto: tcp
port: 25565
nft_from:
- iface: [eth0,wg0]
proto: tcp
port: 25565
dnsmasq:
- name: mcsmanager.oyacoi.ru
ip: 10.10.0.2
+7
View File
@@ -0,0 +1,7 @@
nft_to:
- to: workuter
proto: [tcp, udp]
port: 32765
- to: oyacoi-odcm
proto: [tcp, udp]
port: 32765
+42
View File
@@ -0,0 +1,42 @@
nft_to:
- to: vaultwarden
proto: tcp
port: 8000
- to: gitea
proto: tcp
port: 3000
- to: radicale
proto: tcp
port: 5232
- to: slskd
proto: tcp
port: 5030
- to: asf
proto: tcp
port: 1337
- to: rtorrent
proto: tcp
port: 80
- to: jellyfin
proto: tcp
port: 8096
- to: prosody
proto: tcp
port: 5280
- to: torrserver
proto: tcp
port: 8090
- to: prowlarr
proto: tcp
port: 9696
- to: prowlarr #jackett
proto: tcp
port: 9117
- to: bylampa
proto: tcp
port: 80
nft_from:
- iface: [eth0,eth0.2]
proto: tcp
port: [80,443,24444]
+3
View File
@@ -0,0 +1,3 @@
dnsmasq:
- name: ntfy.oyacoi.ru
ip: 10.10.0.2
+15
View File
@@ -0,0 +1,15 @@
nft_to:
- to: nfs
proto: [tcp, udp]
port: [2049, 111, 32765, 32767]
- to: [zone:eth0.10,zone:eth0.11,zone:eth0.12]
proto: tcp
port: 22
- to: [xiawrt,rbpi4]
proto: tcp
port: 22
xray_policy:
- bypass: private
- bypass: russian_whitelist
- proxy: all
+20
View File
@@ -0,0 +1,20 @@
nft_dst:
- iface: [eth0,eth0.2]
proto: tcp
port: [5000,5222,5223,5280,5270,5269]
nft_to:
- to: pgsql
proto: tcp
port: 5432
nft_from:
- iface: [eth0,eth0.2,wg0]
proto: tcp
port: [5000,5222,5223,5269,5270,5280]
dnsmasq:
- name: talk.oyacoi.ru
ip: 10.10.0.2
- name: upload.oyacoi.ru
ip: 10.10.0.2
+5
View File
@@ -0,0 +1,5 @@
dnsmasq:
- name: prowlarr.oyacoi.ru
ip: 10.10.0.2
- name: jackett.oyacoi.ru
ip: 10.10.0.2
+8
View File
@@ -0,0 +1,8 @@
nft_to:
- to: ps3netsrv
proto: tcp
port: 38008
dnsmasq:
- name: ps3.oyacoi.ru
ip: 10.10.0.2
+3
View File
@@ -0,0 +1,3 @@
dnsmasq:
- name: radicale.oyacoi.ru
ip: 10.10.0.2
+3
View File
@@ -0,0 +1,3 @@
dnsmasq:
- name: rustdesk.dttx.ru
ip: 176.119.157.97
+6
View File
@@ -0,0 +1,6 @@
ansible_host: 10.1.0.1
ansible_connection: ssh
ansible_user: root
ansible_ssh_private_key_file: ~/.ssh/id_ed25519
zone_iface: eth0
container_ip: 10.1.0.1
+13
View File
@@ -0,0 +1,13 @@
nft_dst:
- iface: eth1
proto: tcp
port: ["6890-6899"]
nft_from:
- iface: eth1
proto: tcp
port: ["6890-6899"]
dnsmasq:
- name: rutorrent.oyacoi.ru
ip: 10.10.0.2
+4
View File
@@ -0,0 +1,4 @@
nft_to:
- to: firebat
proto: tcp
port: [22, 8006]
+13
View File
@@ -0,0 +1,13 @@
nft_dst:
- iface: eth1
proto: tcp
port: 50300
nft_from:
- iface: eth1
proto: tcp
port: 50300
dnsmasq:
- name: slskd.oyacoi.ru
ip: 10.10.0.2
+9
View File
@@ -0,0 +1,9 @@
nft_dst:
- iface: eth0
proto: udp
port: 2456
nft_from:
- iface: [eth0,wg0]
proto: udp
port: [2456,2457]
+18
View File
@@ -0,0 +1,18 @@
nft_dst:
- iface: eth1
proto: [tcp, udp]
port: 6990
nft_to:
- to: flaresolverr
proto: tcp
port: 8191
nft_from:
- iface: eth1
proto: [tcp,udp]
port: 6990
dnsmasq:
- name: torrserver.oyacoi.ru
ip: 10.10.0.2
+8
View File
@@ -0,0 +1,8 @@
nft_to:
- to: pgsql
proto: tcp
port: 5432
dnsmasq:
- name: vaultwarden.oyacoi.ru
ip: 10.10.0.2
+10
View File
@@ -0,0 +1,10 @@
nft_to:
- to: nfs
proto: [tcp, udp]
port: [2049, 111, 32765, 32767]
- to: [zone:eth0.10,zone:eth0.11,zone:eth0.12]
proto: tcp
port: 22
- to: [xiawrt,rbpi4]
proto: tcp
port: 22
+8
View File
@@ -0,0 +1,8 @@
nft_to:
- to: zabbix
proto: tcp
port: 10051
dnsmasq:
- name: xiawrt.oyacoi.ru
ip: 10.10.0.2
+11
View File
@@ -0,0 +1,11 @@
nft_to:
- to: "zone:eth0.11"
proto: tcp
port: 10050
- to: xiawrt
proto: tcp
port: 10050
dnsmasq:
- name: zabbix.oyacoi.ru
ip: 10.10.0.2