Skip to content
This repository has been archived by the owner on Apr 16, 2024. It is now read-only.

Commit

Permalink
Add firewall notes to readme
Browse files Browse the repository at this point in the history
  • Loading branch information
thojkooi committed Oct 7, 2017
1 parent 06edc1a commit 329d6a4
Showing 1 changed file with 1 addition and 3 deletions.
4 changes: 1 addition & 3 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,8 +2,6 @@

Terraform module to provision a Docker Swarm mode cluster in a single availability zone on DigitalOcean, using a private network.

By default using the CoreOS alpha image provided by DigitalOcean, but supports expandable configuration to support installation and configuration of e.g. puppet or other configuration management tooling or manual installation of Docker through other means.

- [Requirements](#requirements)
- [Usage](#usage)
- [Examples](#examples)
Expand Down Expand Up @@ -36,7 +34,7 @@ Terraform uses an SSH key to connect to the created droplets in order to issue `

### Notes

This module does not set up a firewall or modifies any other security settings. Please configure this by providing user data for the manager and worker nodes. Also set up firewall rules on DigitalOcean for the cluster, to ensure only cluster members can access the internal Swarm ports.
This module does not set up a firewall or modifies any other security settings. Please configure this by providing user data for the manager and worker nodes. Also set up firewall rules on DigitalOcean for the cluster, to ensure only cluster members can access the internal Swarm ports. You can use the [digitalocean-docker-swarm-firewall](https://github.com/thojkooi/terraform-digitalocean-docker-swarm-firewall) module for this. Look in the [firewall examples directory](https://github.com/thojkooi/terraform-digitalocean-docker-swarm-mode/tree/master/examples/firewall) for inspiration on how to do this.

## Examples

Expand Down

0 comments on commit 329d6a4

Please sign in to comment.