infra-ansible/roles/firewall/tasks, branch v2.0.3 Common Ansible roles http://git.tensin.name/infra-ansible/atom?h=v2.0.3 2023-09-18T20:52:07Z use ansible.builtin.package generic module 2023-09-18T20:52:07Z Egor Tensin Egor.Tensin@gmail.com 2023-09-18T20:52:07Z urn:sha1:896e6824eb3d5488f82990aca9a31db14a82c49f firewall: using the validate arg for testing the config 2023-08-31T23:56:40Z Egor Tensin Egor.Tensin@gmail.com 2023-08-31T23:52:17Z urn:sha1:a3d39b262e525937bfbbd0abb6e5b9e36668d6a6 sort module args, add missing state args, etc. 2023-08-31T22:26:13Z Egor Tensin Egor.Tensin@gmail.com 2023-08-31T22:26:13Z urn:sha1:a89e16c44ee6d038e4f4cf435902e66558cc5cf4 properly prefix things 2023-08-23T19:40:18Z Egor Tensin Egor.Tensin@gmail.com 2023-08-23T19:35:30Z urn:sha1:9062ea04823b0464280d0a6dcd2e67003ce0d2e1 append .j2 extension to templates 2023-08-20T21:02:08Z Egor Tensin Egor.Tensin@gmail.com 2023-08-20T21:02:06Z urn:sha1:c054d22c4818d916ac6dd9c8d7a7a2c614408e17 I saw a good point somewhere that it should help with syntax highlighting. tweak names a bit 2023-08-20T20:37:42Z Egor Tensin Egor.Tensin@gmail.com 2023-08-20T20:37:42Z urn:sha1:b45c5bd35d60c3b18825d5b098171d4877fcadc3 firewall: don't put invalid rules in /etc/iptables/ 2023-08-10T18:46:16Z Egor Tensin Egor.Tensin@gmail.com 2023-08-10T18:21:18Z urn:sha1:2886694a77ad37d64b2ef5b2d181fa046dab4055 firewall: fail on malformed rule files 2023-08-08T22:55:36Z Egor Tensin Egor.Tensin@gmail.com 2023-08-08T22:51:16Z urn:sha1:98fe4a333bd76af7eef8e10e3635edd6f40e86a0 firewall: reboot on rule changes 2023-08-08T20:32:17Z Egor Tensin Egor.Tensin@gmail.com 2023-08-08T20:30:18Z urn:sha1:95a082d3c771fbe9a380f10280134406b7dc3f93 Just restaring netfilter-persistent could break other services depending on iptables, like Docker. Also, I'm not sure why I need a wait_for_connection after a reboot call, so get rid of those. add firewall role 2023-08-08T20:17:16Z Egor Tensin Egor.Tensin@gmail.com 2023-08-08T18:14:32Z urn:sha1:bc2d42aab02b5ef9e27ee59a03543b41d99adf04