From dc4dc69b820b1c598eb5de0b26d2e43fb9dc59f8 Mon Sep 17 00:00:00 2001
From: Egor Tensin <Egor.Tensin@gmail.com>
Date: Mon, 14 Aug 2023 02:38:27 +0200
Subject: add a bunch of READMEs for roles

---
 roles/firewall/README.md | 7 +++++++
 1 file changed, 7 insertions(+)
 create mode 100644 roles/firewall/README.md

(limited to 'roles/firewall')

diff --git a/roles/firewall/README.md b/roles/firewall/README.md
new file mode 100644
index 0000000..9c1a572
--- /dev/null
+++ b/roles/firewall/README.md
@@ -0,0 +1,7 @@
+This role configures iptables rules in /etc/iptables/rules.v{4,6} to be used by
+iptables-persistent.
+
+I found it easier and more flexible to configure a firewall this way; for
+example, I found that cloud provider's firewalls are often less flexible.
+iptables frontends like ufw, on the other hand, are hard to make work with
+Docker.
-- 
cgit v1.2.3