From 26fec920b86e9f03cdb8d847a49f83c6591967b3 Mon Sep 17 00:00:00 2001
From: Vincent Lafeychine <vincent.lafeychine@proton.me>
Date: Sun, 27 Aug 2023 22:32:54 +0200
Subject: [PATCH] chore: Add examples

---
 example.yaml                 | 73 ---------------------------------
 examples/infra.yaml          | 78 ++++++++++++++++++++++++++++++++++++
 examples/infra_included.yaml |  3 ++
 3 files changed, 81 insertions(+), 73 deletions(-)
 delete mode 100644 example.yaml
 create mode 100644 examples/infra.yaml
 create mode 100644 examples/infra_included.yaml

diff --git a/example.yaml b/example.yaml
deleted file mode 100644
index cef6e9b..0000000
--- a/example.yaml
+++ /dev/null
@@ -1,73 +0,0 @@
----
-zones:
-  users-internet-allowed:
-    files: [example.yaml]
-
-  mgmt:
-    addrs: [10.203.0.0/16]
-
-  adm:
-    addrs: [2a09:6840::/29, 10.128.0.0/16]
-
-  internet:
-    negate: true
-    zones: [adm, mgmt]
-
-# interne: negate KO
-
-blacklist:
-  enabled: true
-  addr: [0.0.0.0]
-
-reverse_path_filter:
-  enabled: true
-
-filter:
-  input:
-    - iif: lo
-      verdict: accept
-
-    - src: mgmt
-      protocols:
-        tcp:
-          dport: [22, 240..242]
-      verdict: accept
-
-    - src: backbone
-      protocols:
-        ospf: true
-        vrrp: true
-        tcp:
-            dport: [179]
-      verdict: accept
-
-    - protocols:
-        icmp: true
-      verdict: accept
-
-  output:
-    - verdict: accept
-
-  forward:
-    - src: interco-crans
-      verdict: accept
-
-    - src: users-internet-allowed
-      protocols:
-        tcp:
-          dport: [25]
-      verdict: drop
-
-    - src: users-internet-allowed
-      dest:
-        addrs: [10.0.0.1]
-        zones: [internet]
-      verdict: accept
-
-nat:
-  - src:
-      zones: [mgmt]
-    snat:
-      addr: 45.66.108.14
-      persistent: true
-...
diff --git a/examples/infra.yaml b/examples/infra.yaml
new file mode 100644
index 0000000..b9fd8fb
--- /dev/null
+++ b/examples/infra.yaml
@@ -0,0 +1,78 @@
+---
+zones:
+  users-internet-allowed:
+    file: examples/infra_included.yaml
+
+  mgmt:
+    addrs: 10.203.0.0/16
+
+  adm:
+    addrs: [2a09:6840::/29, 10.128.0.0/16]
+
+  internet:
+    negate: true
+    zones: [adm, mgmt]
+
+
+blacklist:
+  blocked: adm
+
+
+reverse_path_filter:
+  interfaces: back0
+
+
+filter:
+  input:
+    - src: internet
+      dst: gitea
+      protocols:
+        tcp:
+          dport: 22
+      verdict: accept
+
+    - iif: lo
+      verdict: accept
+
+    - src: mgmt
+      protocols:
+        tcp:
+          dport: [22, 240..242]
+      verdict: accept
+
+#
+    # - src: backbone
+      # protocols:
+        # ospf: true
+        # vrrp: true
+        # tcp:
+            # dport: [179]
+      # verdict: accept
+#
+    # - protocols:
+        # icmp: true
+      # verdict: accept
+#
+  # output:
+    # - verdict: accept
+#
+  # forward:
+    # - src: interco-crans
+      # verdict: accept
+#
+    # - src: users-internet-allowed
+      # protocols:
+        # tcp:
+          # dport: [25]
+      # verdict: drop
+#
+    # - src: users-internet-allowed
+      # dest: [10.0.0.1, internet]
+      # verdict: accept
+#
+# nat:
+  # - src: mgmt
+    # snat:
+      # addr: 45.66.108.14
+      # persistent: true
+...
diff --git a/examples/infra_included.yaml b/examples/infra_included.yaml
new file mode 100644
index 0000000..c860fea
--- /dev/null
+++ b/examples/infra_included.yaml
@@ -0,0 +1,3 @@
+---
+- 192.168.1.0/24
+...