Restrict DAC VPN to fox-ipmi machine only

Reviewed-by: Aleix Boné <abonerib@bsc.es>
This commit is contained in:
Rodrigo Arias 2025-06-20 14:47:55 +02:00
parent 22a2e1b9e8
commit 7a52e1907c

View File

@ -26,8 +26,9 @@
auth-user-pass ${config.age.secrets.vpn-dac-login.path}
reneg-sec 0
# Ignore 10.0.0.0 route as is not needed
pull-filter ignore "route 10.0.0.0"
# Only route fox-ipmi
pull-filter ignore "route "
route 147.83.35.27 255.255.255.255
'';
};
};