diff --git a/roles/aws/aws_vpc/defaults/main.yml b/roles/aws/aws_vpc/defaults/main.yml index 0642713d2..998ce60d4 100644 --- a/roles/aws/aws_vpc/defaults/main.yml +++ b/roles/aws/aws_vpc/defaults/main.yml @@ -70,6 +70,7 @@ _common_security_groups: - 22 cidr_ip: 0.0.0.0/0 rule_desc: Allow all incoming tcp traffic on port 22. + rules_egress: [] web_open: name: web_open description: Allow all incoming web traffic on ports 80 and 443. @@ -80,6 +81,7 @@ _common_security_groups: - 443 cidr_ip: 0.0.0.0/0 rule_desc: Allow all incoming tcp traffic on ports 80 and 443. + rules_egress: [] mailpit_open: name: mailpit_open description: Allow all incoming traffic on port 8025 for Mailpit. @@ -89,6 +91,7 @@ _common_security_groups: - 8025 cidr_ip: 0.0.0.0/0 rule_desc: Allow all incoming tcp traffic on port 8025. + rules_egress: [] ftp_open: name: ftp_open description: Allow all incoming traffic on ports 20 and 21 for FTP. @@ -99,6 +102,7 @@ _common_security_groups: - 21 cidr_ip: 0.0.0.0/0 rule_desc: Allow all incoming tcp traffic on ports 20 and 21. + rules_egress: [] sftp_open: name: sftp_open description: Allow all incoming traffic on ports 989 and 990 for sFTP. @@ -109,6 +113,7 @@ _common_security_groups: - 990 cidr_ip: 0.0.0.0/0 rule_desc: Allow all incoming tcp traffic on ports 989 and 990. + rules_egress: [] ossec: name: ossec description: Allow all incoming traffic on ports 1514 and 1515 for OSSEC. @@ -119,6 +124,7 @@ _common_security_groups: - 1515 cidr_ip: 0.0.0.0/0 rule_desc: Allow all incoming udp traffic on ports 1514 and 1515. + rules_egress: [] openvpn: name: openvpn description: Allow all incoming traffic on port 1194 for OpenVPN. @@ -128,3 +134,4 @@ _common_security_groups: - 1194 cidr_ip: 0.0.0.0/0 rule_desc: Allow all incoming udp traffic on port 1194. + rules_egress: []