To kick off June, I’m starting our first ansible full ansible project. Over the next few videos, we’ll build a fedora 40 VM on proxmox using ansible. We’ll then configure it to act as a masquerading NAT router for our lxc containers using nftables. We’ll firewall the host at the same time. Finally, we’ll use podman to deploy a hashicorp vault container to store secrets and see how to use that with ansible.
In this video, we setup an nftables firewall and configure our VM as a NAT router. We use ansible handlers to ensure services are restarted if our configurations change.
GitHub Repo:
[ad_2]
source
