aboutsummaryrefslogblamecommitdiffstatshomepage
path: root/roles/firewall/tasks/main.yml
blob: c3fa6ab802a265b887e0ce7aca05bfe6cacd91c8 (plain) (tree)
1
2
3
4
5
6
7

                                   
                          


                             
                            








                                                           
       

                                                                       
 
                           
                                      
- name: Install iptables-persistent
  become: true
  ansible.builtin.package:
    name: iptables-persistent
    state: present

- name: Configure rule files
  become: true
  ansible.builtin.template:
    src: '{{ item.src }}'
    dest: '{{ item.dest }}'
    owner: root
    group: root
    mode: '640'
    validate: '/usr/sbin/{{ item.tool }}-restore --test %s'
  notify: firewall_reboot
  loop:
    - {src: rules.v4.j2, dest: /etc/iptables/rules.v4, tool: iptables}
    - {src: rules.v6.j2, dest: /etc/iptables/rules.v6, tool: ip6tables}

- name: Reboot if necessary
  ansible.builtin.meta: flush_handlers