ansible-personal/roles/common/tasks/firewall_Ubuntu.yml

---

- block:
  - name: Install firewalld and deps
    when: ansible_distribution_version is version_compare('15.04', '>=')
    apt: pkg={{ item }} state=present
    loop:
      - firewalld
      - tidy

  - name: Copy firewalld public zone file
    when: ansible_distribution_version is version_compare('15.04', '>=')
    template: src=public.xml.j2 dest=/etc/firewalld/zones/public.xml owner=root mode=0600

  - name: Format public.xml firewalld zone file
    when: ansible_distribution_version is version_compare('15.04', '>=')
    command: tidy -xml -iq -m -w 0 /etc/firewalld/zones/public.xml
    notify:
      - reload firewalld
  tags: firewall

# vim: set sw=2 ts=2:
roles/common: Separate firewalld tasks for Ubuntu and Debian Signed-off-by: Alan Orth <alan.orth@gmail.com> 2015-08-23 11:06:25 +02:00			`---`

roles/common: Use blocks to tag children of dynamic tasks When using dynamic includes, child tasks do not inherit tags from their parents. You must tag the parent and each child task separately, or use a block to group children and then apply a tag to a block. See: https://docs.ansible.com/ansible/devel/porting_guides/porting_guide_2.5.html 2018-04-26 15:58:35 +02:00			`- block:`
			`- name: Install firewalld and deps`
			`when: ansible_distribution_version is version_compare('15.04', '>=')`
			`apt: pkg={{ item }} state=present`
			`loop:`
			`- firewalld`
			`- tidy`

			`- name: Copy firewalld public zone file`
			`when: ansible_distribution_version is version_compare('15.04', '>=')`
			`template: src=public.xml.j2 dest=/etc/firewalld/zones/public.xml owner=root mode=0600`
roles/common: Separate firewalld tasks for Ubuntu and Debian Signed-off-by: Alan Orth <alan.orth@gmail.com> 2015-08-23 11:06:25 +02:00
roles/common: Use blocks to tag children of dynamic tasks When using dynamic includes, child tasks do not inherit tags from their parents. You must tag the parent and each child task separately, or use a block to group children and then apply a tag to a block. See: https://docs.ansible.com/ansible/devel/porting_guides/porting_guide_2.5.html 2018-04-26 15:58:35 +02:00			`- name: Format public.xml firewalld zone file`
			`when: ansible_distribution_version is version_compare('15.04', '>=')`
			`command: tidy -xml -iq -m -w 0 /etc/firewalld/zones/public.xml`
			`notify:`
			`- reload firewalld`
roles/common: Use dynamic include_tasks for firewall Use dynamic includes instead of static imports when you are running tasks conditionally or using variable interpolation. The down side is that you need to then tag the parent task as well as all child tasks, as tags only apply to children of statically imported tasks. 2018-04-25 17:58:31 +02:00			`tags: firewall`
roles/common: Add missing vim modelines 2018-04-25 17:55:22 +02:00
			`# vim: set sw=2 ts=2:`