Remove UFW firewall tasks from common role per Jeremy request
This commit is contained in:
@@ -45,30 +45,6 @@
|
||||
enabled: true
|
||||
tags: [common, ssh]
|
||||
|
||||
- name: Configure UFW defaults
|
||||
community.general.ufw:
|
||||
direction: incoming
|
||||
policy: deny
|
||||
tags: [common, firewall]
|
||||
|
||||
- name: Allow SSH through UFW
|
||||
community.general.ufw:
|
||||
rule: allow
|
||||
port: "{{ sshd_port }}"
|
||||
proto: tcp
|
||||
tags: [common, firewall]
|
||||
|
||||
- name: Allow traffic from local network
|
||||
community.general.ufw:
|
||||
rule: allow
|
||||
src: 192.168.86.0/24
|
||||
tags: [common, firewall]
|
||||
|
||||
- name: Enable UFW
|
||||
community.general.ufw:
|
||||
state: enabled
|
||||
tags: [common, firewall]
|
||||
|
||||
- name: Configure fail2ban
|
||||
ansible.builtin.systemd:
|
||||
name: fail2ban
|
||||
|
||||
Reference in New Issue
Block a user