How to deploy pf.conf to multiple machines?
I've got two machines for firewalling. It's good for redundancy but tedious in management:
- edit pf.conf on machine1
- pfctl -f pf.conf
- scp pf.conf machine2:/etc/
- ssh machine2 "pfctl -f /etc/pf.conf"
What software do openbsd folks use for config management?
I've heard good things about ansible but that requires python on the managed machine. I don't want to install any packages on the firewall.
|