Remove UFW firewall tasks from common role per Jeremy request
This commit is contained in:
@@ -45,30 +45,6 @@
|
|||||||
enabled: true
|
enabled: true
|
||||||
tags: [common, ssh]
|
tags: [common, ssh]
|
||||||
|
|
||||||
- name: Configure UFW defaults
|
|
||||||
community.general.ufw:
|
|
||||||
direction: incoming
|
|
||||||
policy: deny
|
|
||||||
tags: [common, firewall]
|
|
||||||
|
|
||||||
- name: Allow SSH through UFW
|
|
||||||
community.general.ufw:
|
|
||||||
rule: allow
|
|
||||||
port: "{{ sshd_port }}"
|
|
||||||
proto: tcp
|
|
||||||
tags: [common, firewall]
|
|
||||||
|
|
||||||
- name: Allow traffic from local network
|
|
||||||
community.general.ufw:
|
|
||||||
rule: allow
|
|
||||||
src: 192.168.86.0/24
|
|
||||||
tags: [common, firewall]
|
|
||||||
|
|
||||||
- name: Enable UFW
|
|
||||||
community.general.ufw:
|
|
||||||
state: enabled
|
|
||||||
tags: [common, firewall]
|
|
||||||
|
|
||||||
- name: Configure fail2ban
|
- name: Configure fail2ban
|
||||||
ansible.builtin.systemd:
|
ansible.builtin.systemd:
|
||||||
name: fail2ban
|
name: fail2ban
|
||||||
|
|||||||
Reference in New Issue
Block a user