mirror of
https://github.com/rubenhensen/k8scd.git
synced 2026-09-17 18:22:54 +02:00
Ruben Hensen
28 lines
615 B
YAML
28 lines
615 B
YAML
---
|
|
- name: Install ufw
|
|
ansible.builtin.apt:
|
|
name: ufw
|
|
state: present
|
|
|
|
- name: Set default incoming policy
|
|
community.general.ufw:
|
|
direction: incoming
|
|
default: "{{ ufw_default_incoming }}"
|
|
|
|
- name: Set default outgoing policy
|
|
community.general.ufw:
|
|
direction: outgoing
|
|
default: "{{ ufw_default_outgoing }}"
|
|
|
|
- name: Allow configured ports
|
|
community.general.ufw:
|
|
rule: allow
|
|
port: "{{ item.port }}"
|
|
proto: "{{ item.proto }}"
|
|
comment: "{{ item.comment | default(omit) }}"
|
|
loop: "{{ ufw_allowed_ports }}"
|
|
|
|
- name: Enable ufw
|
|
community.general.ufw:
|
|
state: enabled
|