ansible-personal/roles/common/tasks/iptables_Debian.yml

---
- name: Install firewalld and deps
  when: ansible_distribution_major_version == '8'
  apt: pkg={{ item }} state=latest
  with_items:
    - firewalld
    - tidy
  tags: packages

- name: Copy firewalld public zone file
  when: ansible_distribution_major_version == '8'
  template: src=public.xml.j2 dest=/etc/firewalld/zones/public.xml owner=root mode=0600

- name: Format public.xml firewalld zone file
  when: ansible_distribution_major_version == '8'
  shell: tidy -xml -iq -m -w 0 /etc/firewalld/zones/public.xml
  notify:
    - restart firewalld
Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com> 2014-08-16 23:35:57 +02:00			`---`
roles/common: Add firewalld support Needed in Ubuntu 15.04 where iptables-persistent is going away. I have added translations of the current IPv4 and IPv6 iptables rules. Signed-off-by: Alan Orth <alan.orth@gmail.com> 2015-06-07 11:42:03 +02:00			`- name: Install firewalld and deps`
roles/common: Separate firewalld tasks for Ubuntu and Debian Signed-off-by: Alan Orth <alan.orth@gmail.com> 2015-08-23 11:06:25 +02:00			`when: ansible_distribution_major_version == '8'`
Revert "Only update packages indexes if the cache is 1 hour old" This reverts commit 201165cff662caad9b51508272e7f8f2eece7b0c. Turns out this actually breaks initial deployments, because the cache gets updated in the first task, then you add sources for nginx and mariadb, but it doesn't update the indexes because the cache is < 3600 seconds old, so you end up getting the distro's versions of nginx and mariadb. 2016-08-25 11:58:15 +02:00			`apt: pkg={{ item }} state=latest`
roles/common: Add firewalld support Needed in Ubuntu 15.04 where iptables-persistent is going away. I have added translations of the current IPv4 and IPv6 iptables rules. Signed-off-by: Alan Orth <alan.orth@gmail.com> 2015-06-07 11:42:03 +02:00			`with_items:`
			`- firewalld`
			`- tidy`
Add 'packages' tag to any task doing package stuff For idempotence we need to run all apt-related tasks, like editing source files, adding keys, installing packages, etc, when running the 'packages' tag. 2016-08-14 15:33:48 +02:00			`tags: packages`
roles/common: Add firewalld support Needed in Ubuntu 15.04 where iptables-persistent is going away. I have added translations of the current IPv4 and IPv6 iptables rules. Signed-off-by: Alan Orth <alan.orth@gmail.com> 2015-06-07 11:42:03 +02:00
			`- name: Copy firewalld public zone file`
roles/common: Separate firewalld tasks for Ubuntu and Debian Signed-off-by: Alan Orth <alan.orth@gmail.com> 2015-08-23 11:06:25 +02:00			`when: ansible_distribution_major_version == '8'`
roles/common: Add firewalld support Needed in Ubuntu 15.04 where iptables-persistent is going away. I have added translations of the current IPv4 and IPv6 iptables rules. Signed-off-by: Alan Orth <alan.orth@gmail.com> 2015-06-07 11:42:03 +02:00			`template: src=public.xml.j2 dest=/etc/firewalld/zones/public.xml owner=root mode=0600`

			`- name: Format public.xml firewalld zone file`
roles/common: Separate firewalld tasks for Ubuntu and Debian Signed-off-by: Alan Orth <alan.orth@gmail.com> 2015-08-23 11:06:25 +02:00			`when: ansible_distribution_major_version == '8'`
roles/common: Add firewalld support Needed in Ubuntu 15.04 where iptables-persistent is going away. I have added translations of the current IPv4 and IPv6 iptables rules. Signed-off-by: Alan Orth <alan.orth@gmail.com> 2015-06-07 11:42:03 +02:00			`shell: tidy -xml -iq -m -w 0 /etc/firewalld/zones/public.xml`
			`notify:`
			`- restart firewalld`