alanorth
/
ansible-personal
1
0
Fork 0
Code Issues 4 Pull Requests Projects Releases Wiki Activity
ansible-personal/roles/common/tasks/firewall_Debian.yml

19 lines
620 B
YAML
Raw Normal View History

Initial commit Signed-off-by: Alan Orth <alan.orth@gmail.com>
2014-08-16 23:35:57 +02:00
---
roles/common: Add firewalld support Needed in Ubuntu 15.04 where iptables-persistent is going away. I have added translations of the current IPv4 and IPv6 iptables rules. Signed-off-by: Alan Orth <alan.orth@gmail.com>
2015-06-07 11:42:03 +02:00
- name: Install firewalld and deps
Use new syntax for Jinj2 filters that are used as tests Ansible 2.5.0 uses a new syntax for Jinja2 filters that are used as tests. See: https://docs.ansible.com/ansible/devel/porting_guides/porting_guide_2.5.html
2018-03-21 20:17:21 +01:00
when: ansible_distribution_major_version is version_compare('8', '>=')
roles/common: Fix issues raised by ansible-lint [ANSIBLE0010] Package installs should not use latest
2017-12-29 19:11:55 +01:00
apt: pkg={{ item }} state=present
Update with_items loops to use new-ish "loop" keyword Ansible 2.4 and 2.5 are moving away from specialized loop functions and the old syntax will eventually be deprecated and removed. I did not change the with_fileglob loops because I'm not sure about their syntax yet. See: https://docs.ansible.com/ansible/latest/user_guide/playbooks_loops.html
2018-04-02 14:52:51 +02:00
loop:
roles/common: Add firewalld support Needed in Ubuntu 15.04 where iptables-persistent is going away. I have added translations of the current IPv4 and IPv6 iptables rules. Signed-off-by: Alan Orth <alan.orth@gmail.com>
2015-06-07 11:42:03 +02:00
- firewalld
- tidy
Add 'packages' tag to any task doing package stuff For idempotence we need to run all apt-related tasks, like editing source files, adding keys, installing packages, etc, when running the 'packages' tag.
2016-08-14 15:33:48 +02:00
tags: packages
roles/common: Add firewalld support Needed in Ubuntu 15.04 where iptables-persistent is going away. I have added translations of the current IPv4 and IPv6 iptables rules. Signed-off-by: Alan Orth <alan.orth@gmail.com>
2015-06-07 11:42:03 +02:00
- name: Copy firewalld public zone file
Use new syntax for Jinj2 filters that are used as tests Ansible 2.5.0 uses a new syntax for Jinja2 filters that are used as tests. See: https://docs.ansible.com/ansible/devel/porting_guides/porting_guide_2.5.html
2018-03-21 20:17:21 +01:00
when: ansible_distribution_major_version is version_compare('8', '>=')
roles/common: Add firewalld support Needed in Ubuntu 15.04 where iptables-persistent is going away. I have added translations of the current IPv4 and IPv6 iptables rules. Signed-off-by: Alan Orth <alan.orth@gmail.com>
2015-06-07 11:42:03 +02:00
template: src=public.xml.j2 dest=/etc/firewalld/zones/public.xml owner=root mode=0600
- name: Format public.xml firewalld zone file
Use new syntax for Jinj2 filters that are used as tests Ansible 2.5.0 uses a new syntax for Jinja2 filters that are used as tests. See: https://docs.ansible.com/ansible/devel/porting_guides/porting_guide_2.5.html
2018-03-21 20:17:21 +01:00
when: ansible_distribution_major_version is version_compare('8', '>=')
roles/common: Use command module instead of shell You should only use the "shell" module when you need shell functions like flow control and redirects. Also, the "command" module is safer because it is not affected by the user's environment.
2017-11-04 23:49:03 +01:00
command: tidy -xml -iq -m -w 0 /etc/firewalld/zones/public.xml
roles/common: Add firewalld support Needed in Ubuntu 15.04 where iptables-persistent is going away. I have added translations of the current IPv4 and IPv6 iptables rules. Signed-off-by: Alan Orth <alan.orth@gmail.com>
2015-06-07 11:42:03 +02:00
notify:
roles/common: Reload firewalld instead of restart There is no need to bounce the service, just reload it.
2017-11-02 17:58:15 +01:00
- reload firewalld