alanorth
/
ansible-personal
1
0
Fork 0
Code Issues 4 Pull Requests Projects Releases Wiki Activity
ansible-personal/roles/common/tasks/firewall_Debian.yml

23 lines
677 B
YAML
Raw Normal View History

Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com>
2014-08-16 23:35:57 +02:00
---
roles/common: Add firewalld support Needed in Ubuntu 15.04 where iptables-persistent is going away. I have added translations of the current IPv4 and IPv6 iptables rules. Signed-off-by: Alan Orth <alan.orth@gmail.com>
2015-06-07 11:42:03 +02:00
- name: Install firewalld and deps
Use new syntax for Jinj2 filters that are used as tests Ansible 2.5.0 uses a new syntax for Jinja2 filters that are used as tests. See: https://docs.ansible.com/ansible/devel/porting_guides/porting_guide_2.5.html
2018-03-21 20:17:21 +01:00
when: ansible_distribution_major_version is version_compare('8', '>=')
roles/common: Fix issues raised by ansible-lint [ANSIBLE0010] Package installs should not use latest
2017-12-29 19:11:55 +01:00
apt: pkg={{ item }} state=present
Update with_items loops to use new-ish "loop" keyword Ansible 2.4 and 2.5 are moving away from specialized loop functions and the old syntax will eventually be deprecated and removed. I did not change the with_fileglob loops because I'm not sure about their syntax yet. See: https://docs.ansible.com/ansible/latest/user_guide/playbooks_loops.html
2018-04-02 14:52:51 +02:00
loop:
roles/common: Add firewalld support Needed in Ubuntu 15.04 where iptables-persistent is going away. I have added translations of the current IPv4 and IPv6 iptables rules. Signed-off-by: Alan Orth <alan.orth@gmail.com>
2015-06-07 11:42:03 +02:00
- firewalld
- tidy
roles: Remove unreachable "packages" tags After reörganizing for dynamic includes these tags will never be reached because the children of dynamic includes do not inherit tags from their parents as they did with static imports.
2018-04-26 15:31:06 +02:00
tags: firewall
roles/common: Add firewalld support Needed in Ubuntu 15.04 where iptables-persistent is going away. I have added translations of the current IPv4 and IPv6 iptables rules. Signed-off-by: Alan Orth <alan.orth@gmail.com>
2015-06-07 11:42:03 +02:00
- name: Copy firewalld public zone file
Use new syntax for Jinj2 filters that are used as tests Ansible 2.5.0 uses a new syntax for Jinja2 filters that are used as tests. See: https://docs.ansible.com/ansible/devel/porting_guides/porting_guide_2.5.html
2018-03-21 20:17:21 +01:00
when: ansible_distribution_major_version is version_compare('8', '>=')
roles/common: Add firewalld support Needed in Ubuntu 15.04 where iptables-persistent is going away. I have added translations of the current IPv4 and IPv6 iptables rules. Signed-off-by: Alan Orth <alan.orth@gmail.com>
2015-06-07 11:42:03 +02:00
template: src=public.xml.j2 dest=/etc/firewalld/zones/public.xml owner=root mode=0600
roles/common: Use dynamic include_tasks for firewall Use dynamic includes instead of static imports when you are running tasks conditionally or using variable interpolation. The down side is that you need to then tag the parent task as well as all child tasks, as tags only apply to children of statically imported tasks.
2018-04-25 17:58:31 +02:00
tags: firewall
roles/common: Add firewalld support Needed in Ubuntu 15.04 where iptables-persistent is going away. I have added translations of the current IPv4 and IPv6 iptables rules. Signed-off-by: Alan Orth <alan.orth@gmail.com>
2015-06-07 11:42:03 +02:00
- name: Format public.xml firewalld zone file
Use new syntax for Jinj2 filters that are used as tests Ansible 2.5.0 uses a new syntax for Jinja2 filters that are used as tests. See: https://docs.ansible.com/ansible/devel/porting_guides/porting_guide_2.5.html
2018-03-21 20:17:21 +01:00
when: ansible_distribution_major_version is version_compare('8', '>=')
roles/common: Use command module instead of shell You should only use the "shell" module when you need shell functions like flow control and redirects. Also, the "command" module is safer because it is not affected by the user's environment.
2017-11-04 23:49:03 +01:00
command: tidy -xml -iq -m -w 0 /etc/firewalld/zones/public.xml
roles/common: Add firewalld support Needed in Ubuntu 15.04 where iptables-persistent is going away. I have added translations of the current IPv4 and IPv6 iptables rules. Signed-off-by: Alan Orth <alan.orth@gmail.com>
2015-06-07 11:42:03 +02:00
notify:
roles/common: Reload firewalld instead of restart There is no need to bounce the service, just reload it.
2017-11-02 17:58:15 +01:00
- reload firewalld
roles/common: Use dynamic include_tasks for firewall Use dynamic includes instead of static imports when you are running tasks conditionally or using variable interpolation. The down side is that you need to then tag the parent task as well as all child tasks, as tags only apply to children of statically imported tasks.
2018-04-25 17:58:31 +02:00
tags: firewall
roles/common: Add missing vim modelines
2018-04-25 17:55:22 +02:00
# vim: set sw=2 ts=2: