feat(iptables): Allow mqtt exporter

Signed-off-by: Julien Riou <julien@riou.xyz>

tasks/iptables.yml

@@ -34,6 +34,15 @@
     jump: ACCEPT
     comment: allow node exporter from vpn
 
+- name: Allow mqtt exporter from VPN
+  ansible.builtin.iptables:
+    chain: INPUT
+    protocol: tcp
+    destination: "{{ openvpn_subnet }}"
+    destination_port: "9000"
+    jump: ACCEPT
+    comment: allow mqtt exporter from vpn
+
 - name: Deny input connections by default
   ansible.builtin.iptables:
     chain: INPUT