roles/common: Update iptables for Ubuntu 16.04
Basically, anything after 15.04 is using firewalld.
This commit is contained in:
parent
ad232a7a8b
commit
d265b522e8
@ -16,18 +16,18 @@
|
|||||||
- restart iptables-persistent
|
- restart iptables-persistent
|
||||||
|
|
||||||
- name: Install firewalld and deps
|
- name: Install firewalld and deps
|
||||||
when: ansible_distribution_version == '15.04'
|
when: ansible_distribution_version >= '15.04'
|
||||||
apt: pkg={{ item }} state=latest
|
apt: pkg={{ item }} state=latest
|
||||||
with_items:
|
with_items:
|
||||||
- firewalld
|
- firewalld
|
||||||
- tidy
|
- tidy
|
||||||
|
|
||||||
- name: Copy firewalld public zone file
|
- name: Copy firewalld public zone file
|
||||||
when: ansible_distribution_version == '15.04'
|
when: ansible_distribution_version >= '15.04'
|
||||||
template: src=public.xml.j2 dest=/etc/firewalld/zones/public.xml owner=root mode=0600
|
template: src=public.xml.j2 dest=/etc/firewalld/zones/public.xml owner=root mode=0600
|
||||||
|
|
||||||
- name: Format public.xml firewalld zone file
|
- name: Format public.xml firewalld zone file
|
||||||
when: ansible_distribution_version == '15.04'
|
when: ansible_distribution_version >= '15.04'
|
||||||
shell: tidy -xml -iq -m -w 0 /etc/firewalld/zones/public.xml
|
shell: tidy -xml -iq -m -w 0 /etc/firewalld/zones/public.xml
|
||||||
notify:
|
notify:
|
||||||
- restart firewalld
|
- restart firewalld
|
||||||
|
Loading…
Reference in New Issue
Block a user