41 lines
1.3 KiB
YAML
41 lines
1.3 KiB
YAML
|
---
|
||
|
|
# Clean up previous firewalld configuration on Ubuntu 20.04, now that we are
|
||
|
|
# migrating to a pure nftables configuration.
|
||
|
|
|
||
|
|
- name: Stop and disable firewalld
|
||
|
|
systemd: name=nftables state=stopped enabled=no
|
||
|
|
|
||
|
|
- name: Set Ubuntu firewall packages to remove
|
||
|
|
set_fact:
|
||
|
|
ubuntu_firewall_packages:
|
||
|
|
- firewalld
|
||
|
|
- tidy
|
||
|
|
|
||
|
|
- name: Remove old firewall packages
|
||
|
|
apt: pkg={{ ubuntu_firewall_packages }} state=absent
|
||
|
|
|
||
|
|
- name: Remove old firewalld zone and ipsets
|
||
|
|
file: dest={{ item }} state=absent
|
||
|
|
loop:
|
||
|
|
- /etc/firewalld/zones/public.xml
|
||
|
|
- /etc/firewalld/ipsets/abusers-ipv4.xml
|
||
|
|
- /etc/firewalld/ipsets/abusers-ipv6.xml
|
||
|
|
- /etc/firewalld/ipsets/spamhaus-ipv4.xml
|
||
|
|
- /etc/firewalld/ipsets/spamhaus-ipv6.xml
|
||
|
|
|
||
|
|
- name: Stop and disable old Spamhaus firewalld systemd timer
|
||
|
|
systemd: name=update-spamhaus-lists.timer state=stopped enabled=no
|
||
|
|
|
||
|
|
- name: Remove old Spamhaus firewalld update script and systemd units
|
||
|
|
file: dest=/usr/local/bin/update-spamhaus-lists.sh state=absent
|
||
|
|
loop:
|
||
|
|
- /usr/local/bin/update-spamhaus-lists.sh
|
||
|
|
- /etc/systemd/system/update-spamhaus-lists.service
|
||
|
|
- /etc/systemd/system/update-spamhaus-lists.timer
|
||
|
|
|
||
|
|
# need to reload to pick up service/timer/environment changes
|
||
|
|
- name: Reload systemd daemon
|
||
|
|
systemd: daemon_reload=yes
|
||
|
|
|
||
|
|
# vim: set sw=2 ts=2:
|