alanorth
/
ansible-personal
1
0
Fork 0
Code Issues 4 Pull Requests Projects Releases Wiki Activity

roles/common: Fix nftables handler in Debian firewall 

We used to use reload, but now the idempotent thing to do is to use
restart instead of reload.
This commit is contained in:
Alan Orth 2021-09-07 15:43:33 +03:00
parent d261f81642
commit 479127a5e4
Signed by: alanorth
GPG Key ID: 0FB860CC9C45B1B9
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
roles/common/tasks/firewall_Debian.yml
View File

@ -28,7 +28,7 @@
when: ansible_distribution_major_version is version('11', '>=')
template: src=nftables.conf.j2 dest=/etc/nftables.conf owner=root mode=0644
notify:
- reload nftables
- restart nftables
- name: Create /etc/nftables extra config directory
when: ansible_distribution_major_version is version('11', '>=')
@ -44,7 +44,7 @@
- abuseipdb-ipv4.nft
- abuseipdb-ipv6.nft
notify:
- reload nftables
- restart nftables
- name: Use iptables backend in firewalld
when: ansible_distribution_major_version is version('10', '==')