diff --git a/roles/secure/defaults/main.yml b/roles/secure/defaults/main.yml index 8006c1c..18b2af4 100644 --- a/roles/secure/defaults/main.yml +++ b/roles/secure/defaults/main.yml @@ -3,7 +3,7 @@ common_full_upgrade: false common_allow_restart: false # allow restarting after update # Install and configure UFW Firewall on the system -common_firewall_enable: true +common_firewall_enabled: true common_firewall_reject: false # reject all connections by default # Default Firewall Rules diff --git a/roles/secure/tasks/main.yml b/roles/secure/tasks/main.yml index 580f1fd..6061027 100644 --- a/roles/secure/tasks/main.yml +++ b/roles/secure/tasks/main.yml @@ -41,7 +41,7 @@ port: "{{ rule.port }}" rule: "{{ rule.rule | default('allow') }}" delete: "{{ true if rule.state == 'absent' else omit | default(omit) }}" - direction: "{{ rule.direction | default(omit) }}" + direction: "{{ rule.direction | default('in') }}" proto: "{{ rule.protocol | default('tcp') }}" interface: "{{ rule.interface if rule.interface != 'all' else omit | default(omit) }}" comment: "{{ rule.comment | default('Custom rule for port {{ rule.port }} on {{ rule.interface }}') }}"