Add dynamic IP whitelisting with iptables (#75)

Add dynamic IP whitelisting with iptables

.circleci/config.yml

@@ -35,7 +35,7 @@ jobs:
     steps:
       - checkout
       - run: go get github.com/golang/dep/cmd/dep
-      - run: dep ensure -v && dep prune && test -z "$(git status --porcelain -- Gopkg.toml Gopkg.lock vendor)"
+      - run: dep ensure -v && test -z "$(git status --porcelain -- Gopkg.toml Gopkg.lock vendor)"
       - run: mkdir -p $TEST_RESULTS
       - run: make test
 

.goreleaser.yml

@@ -40,6 +40,7 @@ nfpm:
     "cmd/draupnir-destroy-instance": "/usr/local/bin/draupnir-destroy-instance"
     "cmd/draupnir-finalise-image": "/usr/local/bin/draupnir-finalise-image"
     "cmd/draupnir-destroy-image": "/usr/local/bin/draupnir-destroy-image"
+    "scripts/iptables": "/usr/lib/draupnir/bin/iptables"
 snapshot:
   name_template: SNAPSHOT-{{ .Commit }}
 checksum:

Gopkg.toml

@@ -20,6 +20,9 @@
 #  name = "github.com/x/y"
 #  version = "2.4.0"
 
+[prune]
+  go-tests = true
+  unused-packages = true
 
 [[constraint]]
   name = "github.com/gorilla/mux"
@@ -64,3 +67,7 @@
 [[constraint]]
   branch = "master"
   name = "github.com/prometheus/common"
+
+[[constraint]]
+  name = "github.com/coreos/go-iptables"
+  version = "0.4.2"

Makefile

@@ -16,7 +16,7 @@ migrate:
 	sql-migrate up
 
 dump-schema:
-	pg_dump -sxOf structure.sql draupnir
+	pg_dump --schema-only --no-privileges --no-owner --file structure.sql draupnir
 
 test:
 	go test ./...