From dbf3bcfb0cd21dc26be4141247c8952d929dd117 Mon Sep 17 00:00:00 2001
From: Alan Orth <alan.orth@gmail.com>
Date: Thu, 11 Sep 2014 00:12:55 +0300
Subject: [PATCH] Add ipsets.yml

Contains "ghetto" ipsets which we use in firewall rules etc.

Signed-off-by: Alan Orth <alan.orth@gmail.com>
---
 vars/ipsets.yml | 6 ++++++
 web.yml         | 1 +
 2 files changed, 7 insertions(+)
 create mode 100644 vars/ipsets.yml

diff --git a/vars/ipsets.yml b/vars/ipsets.yml
new file mode 100644
index 0000000..4334999
--- /dev/null
+++ b/vars/ipsets.yml
@@ -0,0 +1,6 @@
+---
+
+ghetto_ipsets:
+  public: { src: '0.0.0.0/0' }
+
+# vim: set ts=2 sw=2:
diff --git a/web.yml b/web.yml
index c0029b9..460be4d 100644
--- a/web.yml
+++ b/web.yml
@@ -11,6 +11,7 @@
     - php5-fpm
     - munin
   vars_files:
+    - vars/ipsets.yml
     - "vars/{{ ansible_os_family }}.yml"
 
 # vim: set sw=2 ts=2: