Fix iptables for void

This commit is contained in:
Daniel A. Maierhofer
2018-07-28 20:15:53 +02:00
parent eec87d3b33
commit ac121b21d3
3 changed files with 24 additions and 14 deletions

View File

@@ -1,26 +1,13 @@
--- ---
- name: iptables - install iptables-persistent - name: iptables - install iptables-persistent
package: name=iptables-persistent package: name=iptables-persistent
when: ansible_os_family == "Debian"
- name: iptables - install iptables
package: name=iptables
when: ansible_os_family != "Debian"
- name: /etc/iptables/rules.v4 - name: /etc/iptables/rules.v4
template: "dest=/etc/iptables/rules.v4 src={{ common_iptables_v4 }} owner=root group=root mode=0644" template: "dest=/etc/iptables/rules.v4 src={{ common_iptables_v4 }} owner=root group=root mode=0644"
notify: notify:
iptables restore iptables restore
- name: iptables - setup service for IPv4
service: name=iptables enabled=yes
when: ansible_os_family != "Debian"
- name: /etc/iptables/rules.v6 - name: /etc/iptables/rules.v6
template: "dest=/etc/iptables/rules.v6 src={{ common_iptables_v6 }} owner=root group=root mode=0644" template: "dest=/etc/iptables/rules.v6 src={{ common_iptables_v6 }} owner=root group=root mode=0644"
notify: notify:
iptables restore iptables restore
- name: iptables - setup service for IPv6
service: name=ip6tables enabled=yes
when: ansible_os_family != "Debian"

19
tasks/iptables_void.yml Normal file
View File

@@ -0,0 +1,19 @@
---
- name: iptables - install iptables
package: name=iptables
- name: /etc/iptables/rules.v4
template: "dest=/etc/iptables/iptables.rules src={{ common_iptables_v4 }} owner=root group=root mode=0644"
notify:
iptables restore
- name: iptables - setup service for IPv4
service: name=iptables enabled=yes
- name: /etc/iptables/rules.v6
template: "dest=/etc/iptables/ip6tables.rules src={{ common_iptables_v6 }} owner=root group=root mode=0644"
notify:
iptables restore
- name: iptables - setup service for IPv6
service: name=ip6tables enabled=yes

View File

@@ -70,7 +70,11 @@
tags: ['common', 'logrotate'] tags: ['common', 'logrotate']
- import_tasks: iptables.yml - import_tasks: iptables.yml
when: common_iptables when: common_iptables and ansible_os_family == "Debian"
tags: ['common', 'iptables']
- import_tasks: iptables_void.yml
when: common_iptables and ansible_os_family != "Debian"
tags: ['common', 'iptables'] tags: ['common', 'iptables']
- import_tasks: snapper.yml - import_tasks: snapper.yml