HomeInfra/HetznerTerra
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: allow optional non-tailnet CIDRs alongside tailnet restrictions
Some checks failed
Deploy Cluster / Terraform (push) Successful in 37s
Details
Deploy Cluster / Ansible (push) Failing after 2m50s
Details

Browse Source
This commit is contained in:
MichaelFisher1997
2026-03-01 14:01:32 +00:00
parent d29a428f2d
commit 0d83ef45c1
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
terraform/firewall.tf
View File

@@ -1,6 +1,6 @@
locals { locals {
ssh_source_ips = var.restrict_api_ssh_to_tailnet ? [var.tailnet_cidr] : var.allowed_ssh_ips ssh_source_ips = var.restrict_api_ssh_to_tailnet ? concat([var.tailnet_cidr], var.allowed_ssh_ips) : var.allowed_ssh_ips
api_source_ips = var.restrict_api_ssh_to_tailnet ? [var.tailnet_cidr] : var.allowed_api_ips api_source_ips = var.restrict_api_ssh_to_tailnet ? concat([var.tailnet_cidr], var.allowed_api_ips) : var.allowed_api_ips
} }
resource "hcloud_firewall" "cluster" { resource "hcloud_firewall" "cluster" {