roles/common: Rename "iptables" task to "firewall"
This commit is contained in:
35
roles/common/tasks/firewall_Ubuntu.yml
Normal file
35
roles/common/tasks/firewall_Ubuntu.yml
Normal file
@ -0,0 +1,35 @@
|
||||
---
|
||||
- name: Install iptables-persistent
|
||||
when: ansible_distribution_version | version_compare('14.04', '==')
|
||||
apt: pkg=iptables-persistent update_cache=yes
|
||||
tags: packages
|
||||
|
||||
- name: Copy /etc/iptables/rules.v4
|
||||
when: ansible_distribution_version | version_compare('14.04', '==')
|
||||
template: src=iptables.j2 dest=/etc/iptables/rules.v4 owner=root mode=0600
|
||||
notify:
|
||||
- restart iptables-persistent
|
||||
|
||||
- name: Copy /etc/iptables/rules.v6
|
||||
when: ansible_distribution_version | version_compare('14.04', '==')
|
||||
template: src=ip6tables.j2 dest=/etc/iptables/rules.v6 owner=root group=root mode=0600
|
||||
notify:
|
||||
- restart iptables-persistent
|
||||
|
||||
- name: Install firewalld and deps
|
||||
when: ansible_distribution_version | version_compare('15.04', '>=')
|
||||
apt: pkg={{ item }} state=latest
|
||||
with_items:
|
||||
- firewalld
|
||||
- tidy
|
||||
tags: packages
|
||||
|
||||
- name: Copy firewalld public zone file
|
||||
when: ansible_distribution_version | version_compare('15.04', '>=')
|
||||
template: src=public.xml.j2 dest=/etc/firewalld/zones/public.xml owner=root mode=0600
|
||||
|
||||
- name: Format public.xml firewalld zone file
|
||||
when: ansible_distribution_version | version_compare('15.04', '>=')
|
||||
shell: tidy -xml -iq -m -w 0 /etc/firewalld/zones/public.xml
|
||||
notify:
|
||||
- restart firewalld
|
Reference in New Issue
Block a user