feat: new proxy rules

inventory/group_vars/all/xray_sets.yml

@@ -43,6 +43,7 @@ xray_domain_sets:
       - rutracker.org
       - rutracker.net
       - tapochek.net
+      - bt.tapochek.net
       - nnmclub.to
       - rutor.info
       - bigfangroup.org

inventory/host_vars/haproxy.yml

@@ -1,4 +1,22 @@
 nft_to:
   - to: nginx
     proto: tcp
-    port: [80, 81, 443, 444, 24445]
+    port: [80,81,443,444,24445,5222,5223,5269,5000,5270,5280]
+  - to: coturn
+    proto: tcp
+    port: [3478,5349]
+  - to: coturn
+    proto: udp
+    port: [3478,5349,"49152-65535"]
+  - to: mcsmanager
+    proto: tcp
+    port: 25565
+  - to: steamcmd
+    proto: udp
+    port: [2456,2457]
+  - to: rbpi4
+    proto: tcp
+    port: "21114-21119"
+  - to: rbpi4
+    proto: udp
+    port: 21116 

inventory/host_vars/iphone11.yml

@@ -0,0 +1,4 @@
+xray_policy:
+  - bypass: private
+  - bypass: russian_whitelist
+  - proxy: all 

inventory/host_vars/nginx.yml

@@ -35,6 +35,9 @@ nft_to:
   - to: bylampa
     proto: tcp
     port: 80
+  - to: mcsmanager
+    proto: tcp
+    port: [23333,24444]
 
 nft_from:
   - iface: [eth0,eth0.2]

inventory/host_vars/runner.yml

@@ -2,6 +2,9 @@ nft_to:
   - to: firebat
     proto: tcp
     port: [22, 8006]
+  - to: nginx 
+    proto: tcp
+    port: 443
 
 xray_policy:
   - proxy: terraform

inventory/static.yml

@@ -73,6 +73,10 @@ all:
           container_ip: "10.3.0.5"
           zone_iface: "eth0.3"
 
+        haproxy:
+          container_ip: "10.255.255.100"
+          zone_iface: "wg0"
+
         xiawrt:
           container_ip: "10.250.250.1"
           zone_iface: "wg0"