hostname: reverse-proxy inherits: [ _default, _debian ]

recipes:

etc_hosts: dnsmasq
nginx:
  sites-enabled: [ proxy ]

iptables:
  input:
    - ssh: { dport: 22, match: state, state: NEW }
    - http: { dport: [80, 443], match: state, state: NEW, source: 192.168.1.0/24 }
    - dns: { dport: 53, protocol: udp }