234 lines
3.9 KiB
JSON
234 lines
3.9 KiB
JSON
|
|
{
|
||
|
|
"hote": "site-edge-01",
|
||
|
|
"genere_par": "scripts/resoudre_flux.py (make flux) — ne pas editer",
|
||
|
|
"sorties": [
|
||
|
|
{
|
||
|
|
"vers": "site-backup-01",
|
||
|
|
"ip": "10.31.35.11",
|
||
|
|
"proto": "tcp",
|
||
|
|
"port": "22",
|
||
|
|
"role": "serveur_debian"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vers": "site-cache-01",
|
||
|
|
"ip": "10.31.33.21",
|
||
|
|
"proto": "tcp",
|
||
|
|
"port": "22",
|
||
|
|
"role": "serveur_debian"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vers": "site-cache-01",
|
||
|
|
"ip": "10.31.33.21",
|
||
|
|
"proto": "tcp",
|
||
|
|
"port": "3142",
|
||
|
|
"role": "serveur_artefacts"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vers": "site-dns-01",
|
||
|
|
"ip": "10.31.34.11",
|
||
|
|
"proto": "tcp",
|
||
|
|
"port": "22",
|
||
|
|
"role": "serveur_debian"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vers": "site-dns-01",
|
||
|
|
"ip": "10.31.34.11",
|
||
|
|
"proto": "tcp",
|
||
|
|
"port": "53",
|
||
|
|
"role": "serveur_resolveur"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vers": "site-dnspub-01",
|
||
|
|
"ip": "10.31.37.21",
|
||
|
|
"proto": "tcp",
|
||
|
|
"port": "22",
|
||
|
|
"role": "serveur_debian"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vers": "site-forge-01",
|
||
|
|
"ip": "10.31.33.11",
|
||
|
|
"proto": "tcp",
|
||
|
|
"port": "22",
|
||
|
|
"role": "serveur_debian"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vers": "site-forge-01",
|
||
|
|
"ip": "10.31.33.11",
|
||
|
|
"proto": "tcp",
|
||
|
|
"port": "443",
|
||
|
|
"role": "serveur_forgejo"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vers": "site-mon-01",
|
||
|
|
"ip": "10.31.36.11",
|
||
|
|
"proto": "tcp",
|
||
|
|
"port": "22",
|
||
|
|
"role": "serveur_debian"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vers": "site-mon-01",
|
||
|
|
"ip": "10.31.36.11",
|
||
|
|
"proto": "tcp",
|
||
|
|
"port": "3000",
|
||
|
|
"role": "serveur_grafana"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vers": "site-mon-01",
|
||
|
|
"ip": "10.31.36.11",
|
||
|
|
"proto": "tcp",
|
||
|
|
"port": "3100",
|
||
|
|
"role": "serveur_loki"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vers": "site-mon-01",
|
||
|
|
"ip": "10.31.36.11",
|
||
|
|
"proto": "tcp",
|
||
|
|
"port": "5665",
|
||
|
|
"role": "serveur_icinga"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vers": "site-mon-01",
|
||
|
|
"ip": "10.31.36.11",
|
||
|
|
"proto": "tcp",
|
||
|
|
"port": "8080",
|
||
|
|
"role": "serveur_icingaweb2"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vers": "site-ops-01",
|
||
|
|
"ip": "10.31.31.11",
|
||
|
|
"proto": "tcp",
|
||
|
|
"port": "22",
|
||
|
|
"role": "serveur_debian"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vers": "site-ops-01",
|
||
|
|
"ip": "10.31.31.11",
|
||
|
|
"proto": "tcp",
|
||
|
|
"port": "8090",
|
||
|
|
"role": "serveur_ops"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vers": "site-pki-01",
|
||
|
|
"ip": "10.31.32.11",
|
||
|
|
"proto": "tcp",
|
||
|
|
"port": "22",
|
||
|
|
"role": "serveur_debian"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vers": "site-pki-01",
|
||
|
|
"ip": "10.31.32.11",
|
||
|
|
"proto": "tcp",
|
||
|
|
"port": "8443",
|
||
|
|
"role": "serveur_step_ca"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"entrees": [
|
||
|
|
{
|
||
|
|
"proto": "tcp",
|
||
|
|
"port": "9100",
|
||
|
|
"role": "client_metrique",
|
||
|
|
"sources": [
|
||
|
|
"10.31.36.11"
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"proto": "tcp",
|
||
|
|
"port": "22",
|
||
|
|
"role": "serveur_debian",
|
||
|
|
"sources": [
|
||
|
|
"10.31.31.11",
|
||
|
|
"10.31.32.11",
|
||
|
|
"10.31.33.11",
|
||
|
|
"10.31.33.21",
|
||
|
|
"10.31.34.11",
|
||
|
|
"10.31.35.11",
|
||
|
|
"10.31.36.11",
|
||
|
|
"10.31.37.11",
|
||
|
|
"10.31.37.21"
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"proto": "icmp",
|
||
|
|
"port": "frag-needed",
|
||
|
|
"role": "serveur_debian",
|
||
|
|
"sources": [
|
||
|
|
"0.0.0.0/0"
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"proto": "icmp",
|
||
|
|
"port": "echo-request",
|
||
|
|
"role": "serveur_debian",
|
||
|
|
"sources": [
|
||
|
|
"10.31.36.11"
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"proto": "tcp",
|
||
|
|
"port": "80",
|
||
|
|
"role": "serveur_nginx",
|
||
|
|
"sources": [
|
||
|
|
"10.31.0.0/24",
|
||
|
|
"10.31.31.0/24",
|
||
|
|
"10.31.31.1/32",
|
||
|
|
"10.31.32.1/32",
|
||
|
|
"10.31.33.1/32",
|
||
|
|
"10.31.34.1/32",
|
||
|
|
"10.31.35.1/32",
|
||
|
|
"10.31.36.1/32",
|
||
|
|
"10.31.37.1/32"
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"proto": "tcp",
|
||
|
|
"port": "443",
|
||
|
|
"role": "serveur_nginx",
|
||
|
|
"sources": [
|
||
|
|
"10.31.31.11",
|
||
|
|
"10.31.32.11",
|
||
|
|
"10.31.33.11",
|
||
|
|
"10.31.33.21",
|
||
|
|
"10.31.34.11",
|
||
|
|
"10.31.35.11",
|
||
|
|
"10.31.36.11",
|
||
|
|
"10.31.37.11",
|
||
|
|
"10.31.37.21"
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"proto": "tcp",
|
||
|
|
"port": "443",
|
||
|
|
"role": "serveur_nginx",
|
||
|
|
"sources": [
|
||
|
|
"10.31.0.0/24",
|
||
|
|
"10.31.31.0/24",
|
||
|
|
"10.31.31.1/32",
|
||
|
|
"10.31.32.1/32",
|
||
|
|
"10.31.33.1/32",
|
||
|
|
"10.31.34.1/32",
|
||
|
|
"10.31.35.1/32",
|
||
|
|
"10.31.36.1/32",
|
||
|
|
"10.31.37.1/32"
|
||
|
|
]
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"admin_ssh": [
|
||
|
|
"10.31.0.0/24",
|
||
|
|
"10.31.31.0/24",
|
||
|
|
"10.31.31.1/32",
|
||
|
|
"10.31.32.1/32",
|
||
|
|
"10.31.33.1/32",
|
||
|
|
"10.31.34.1/32",
|
||
|
|
"10.31.35.1/32",
|
||
|
|
"10.31.36.1/32",
|
||
|
|
"10.31.37.1/32"
|
||
|
|
],
|
||
|
|
"sorties_externes": [
|
||
|
|
{
|
||
|
|
"proto": "icmp",
|
||
|
|
"port": "frag-needed",
|
||
|
|
"role": "serveur_debian"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|