lunivity/ansible-common
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

[c] bugfixes

Browse source
This commit is contained in:
Sangelo 2024-10-16 21:53:09 +02:00
parent d7ea614a66
commit 664fa68b17
1 changed files with 6 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
roles/secure/tasks/main.yml
View file

@ -40,15 +40,17 @@
community.general.ufw: community.general.ufw:
port: "{{ rule.port }}" port: "{{ rule.port }}"
rule: "{{ rule.rule | default('allow') }}" rule: "{{ rule.rule | default('allow') }}"
delete: "{{ true if rule.state == 'absent' else false | default(false) }}" delete: "{{ true if rule.state == 'absent' else omit | default(omit) }}"
direction: "{{ rule.direction | default('in') }}" direction: "{{ rule.direction | default(omit) }}"
proto: "{{ rule.protocol | default('tcp') }}" proto: "{{ rule.protocol | default('tcp') }}"
interface: "{{ rule.interface if rule.interface != 'all' else omit }}" interface: "{{ rule.interface if rule.interface != 'all' else omit | default(omit) }}"
comment: "{{ rule.comment | default('Custom rule for port {{ rule.port }} on {{ rule.interface }}') }}" comment: "{{ rule.comment | default('Custom rule for port {{ rule.port }} on {{ rule.interface }}') }}"
loop: "{{ common_firewall | default([]) }}" loop: "{{ common_firewall | default([]) }}"
loop_control: loop_control:
loop_var: rule loop_var: rule
when: common_firewall_enable when:
- common_firewall_enabled
- common_firewall
- name: Install sudo - name: Install sudo
ansible.builtin.apt: ansible.builtin.apt: