vault backup: 2026-01-05 14:26:17
This commit is contained in:
@@ -0,0 +1,99 @@
|
||||
|
||||
堡垒机:
|
||||
https://10.160.32.248
|
||||
gwjh
|
||||
1@qwaSzx202407
|
||||
|
||||
| | | |
|
||||
|---|---|---|
|
||||
|
||||
VPN:
|
||||
|[https://218.20.201.210](https://218.20.201.210/)
|
||||
gwjhgzzn
|
||||
gzpy135.com
|
||||
new:
|
||||
```
|
||||
Pygwjh@202409
|
||||
```
|
||||
|
||||
|
||||
|
||||
114:
|
||||
root
|
||||
114gZgw$jH0510M
|
||||
|
||||
115:
|
||||
root
|
||||
gZg115w$jH0510M
|
||||
|
||||
116:
|
||||
root
|
||||
gZgw116$jH0510M
|
||||
|
||||
176:
|
||||
root
|
||||
g@W2024.Jh
|
||||
|
||||
177:
|
||||
Gw@Jh2023.K
|
||||
|
||||
|
||||
|
||||
|
||||
三台minio服务,端口9000
|
||||
10.160.20.114、10.160.20.115、10.160.20.116
|
||||
三台NGINX,端口80和443
|
||||
10.160.20.176、10.160.20.177
|
||||
|
||||
|
||||
|
||||
firewalld whitelist
|
||||
|
||||
```bash
|
||||
|
||||
firewall-cmd --new-zone=whitelist --permanent
|
||||
firewall-cmd --reload
|
||||
```
|
||||
|
||||
14 firewall:
|
||||
```
|
||||
firewall-cmd --permanent --add-port=9000/tcp
|
||||
firewall-cmd --permanent --add-port=9001/tcp
|
||||
firewall-cmd --permanent --add-port=9100/tcp
|
||||
firewall-cmd --reload
|
||||
```
|
||||
|
||||
|
||||
176/177:
|
||||
```bash
|
||||
|
||||
firewall-cmd --permanent --add-service=http
|
||||
firewall-cmd --permanent --add-service=https
|
||||
firewall-cmd --reload
|
||||
|
||||
```
|
||||
|
||||
|
||||
new white list:
|
||||
ip list:
|
||||
10.160.20.112-119
|
||||
10.160.20.102
|
||||
10.160.20.107
|
||||
10.160.20.110
|
||||
10.160.20.176
|
||||
10.160.20.177
|
||||
|
||||
```bash
|
||||
firewall-cmd --zone=public --add-rich-rule='rule family="ipv4" source address="10.160.20.0/24" accept' --permanent
|
||||
firewall-cmd --reload
|
||||
```
|
||||
|
||||
|
||||
remove:
|
||||
|
||||
```shell
|
||||
firewall-cmd --zone=public --list-rich-rules --permanent
|
||||
firewall-cmd --zone=public --remove-rich-rule='rule family="ipv4" source address="10.160.20.0/24" accept' --permanent
|
||||
firewall-cmd --reload
|
||||
firewall-cmd --list-all
|
||||
```
|
||||
Reference in New Issue
Block a user