Allow pings to ingress

This makes testing connections much simpler
2023-11-05 21:48:25 +00:00
parent dd1558bafa
commit 5fb605231d
1 changed files with 4 additions and 0 deletions
--- a/ansible/roles/ingress/files/nftables.conf
+++ b/ansible/roles/ingress/files/nftables.conf
@ -11,6 +11,10 @@ table inet filter {

        iif lo accept

+        # Allow ICMP (pings)
+        ip protocol icmp accept
+        meta l4proto icmpv6 accept
+
        tcp dport {http, https, {{ ssh_port }}, 8443, 8448} accept

        # Allow nebula