aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/roles/firewall/tasks/main.yml
diff options
context:
space:
mode:
Diffstat (limited to 'roles/firewall/tasks/main.yml')
-rw-r--r--roles/firewall/tasks/main.yml8
1 files changed, 4 insertions, 4 deletions
diff --git a/roles/firewall/tasks/main.yml b/roles/firewall/tasks/main.yml
index c3fa6ab..d064cc5 100644
--- a/roles/firewall/tasks/main.yml
+++ b/roles/firewall/tasks/main.yml
@@ -5,18 +5,18 @@
state: present
- name: Configure rule files
+ loop:
+ - {src: rules.v4.j2, dest: /etc/iptables/rules.v4, tool: iptables}
+ - {src: rules.v6.j2, dest: /etc/iptables/rules.v6, tool: ip6tables}
become: true
ansible.builtin.template:
src: '{{ item.src }}'
dest: '{{ item.dest }}'
owner: root
group: root
- mode: '640'
+ mode: '0640'
validate: '/usr/sbin/{{ item.tool }}-restore --test %s'
notify: firewall_reboot
- loop:
- - {src: rules.v4.j2, dest: /etc/iptables/rules.v4, tool: iptables}
- - {src: rules.v6.j2, dest: /etc/iptables/rules.v6, tool: ip6tables}
- name: Reboot if necessary
ansible.builtin.meta: flush_handlers