infra-ansible, branch v0.0.4 Common Ansible roles http://git.tensin.name/infra-ansible/atom?h=v0.0.4 2023-08-08T20:59:14Z v0.0.4 2023-08-08T20:59:14Z Egor Tensin Egor.Tensin@gmail.com 2023-08-08T20:59:14Z urn:sha1:c5a68e76eca22deca195054087b3817f621f6b77 firewall: make SSH port go first in rules 2023-08-08T20:57:19Z Egor Tensin Egor.Tensin@gmail.com 2023-08-08T20:57:19Z urn:sha1:3ca728406720da6814f4bcb670639315e3170270 add router role 2023-08-08T20:55:04Z Egor Tensin Egor.Tensin@gmail.com 2023-08-08T20:54:28Z urn:sha1:f10a9fe80ce3b3a8eeb183c24cec1f34bd0f8177 wireguard: optionally set iptables rules 2023-08-08T20:45:22Z Egor Tensin Egor.Tensin@gmail.com 2023-08-08T20:38:33Z urn:sha1:0b2eb8d752c5229e50663226be897f8ef8bfa013 firewall: reboot on rule changes 2023-08-08T20:32:17Z Egor Tensin Egor.Tensin@gmail.com 2023-08-08T20:30:18Z urn:sha1:95a082d3c771fbe9a380f10280134406b7dc3f93 Just restaring netfilter-persistent could break other services depending on iptables, like Docker. Also, I'm not sure why I need a wait_for_connection after a reboot call, so get rid of those. add firewall role 2023-08-08T20:17:16Z Egor Tensin Egor.Tensin@gmail.com 2023-08-08T18:14:32Z urn:sha1:bc2d42aab02b5ef9e27ee59a03543b41d99adf04 v0.0.3 2023-08-07T20:17:24Z Egor Tensin Egor.Tensin@gmail.com 2023-08-07T20:17:24Z urn:sha1:8e34a7c44d3dac61cafa060bc6c1920c872e01b1 wireguard: persistent_keepalive can be set to false 2023-08-07T19:22:51Z Egor Tensin Egor.Tensin@gmail.com 2023-08-07T19:18:54Z urn:sha1:013e3e142e40a345ee723f8cee318229fadf6ab8 wireguard: explicitly set SaveConfig=false 2023-08-07T19:22:51Z Egor Tensin Egor.Tensin@gmail.com 2023-08-07T19:14:12Z urn:sha1:643b8508022f3e4806e5a736cef6e65206d62ad7 wireguard: don't forget to enable the wg-quick service 2023-08-07T19:22:51Z Egor Tensin Egor.Tensin@gmail.com 2023-08-07T18:39:15Z urn:sha1:b59a9efa8481fb1f999d0e387b196393da6c9c7e