An Ansible role to manage firewalld
None
---
# defaults file for ansible-firewalld
# Defines any custom zones to create/delete
# zone - name of zone
#
# present - whether custom zone is created/deleted
## present: true
### creates zone if not already present
## present: false
### deletes zone if present
firewalld_custom_zones: []
# - zone: 'docker'
# state: 'enabled'
# present: false
# - zone: 'privateDNS'
# state: 'enabled'
# present: true
# Defines firewall rules
firewalld_rules: []
# # - service: 'dhcp'
# # permanent: true
# # zone: 'public'
# - service: 'http'
# state: 'enabled'
# permanent: true
# zone: 'public'
# - service: 'https'
# state: 'enabled'
# permanent: true
# zone: 'public'
# - service: 'ssh'
# state: 'enabled'
# permanent: true
# zone: 'public'
# Defines firewall zones (default zones - not custom zones)
firewalld_zones: []
# - zone: 'home'
# permanent: true
# state: 'enabled'
# interface: 'enp0s3'
# - zone: 'public'
# permanent: true
# state: 'enabled'
# interface: 'enp0s8'
None
---
- hosts: test-nodes
vars:
firewalld_custom_zones:
- zone: 'privateDNS'
state: 'enabled'
present: true
firewalld_enable_immediately: true
firewalld_rules:
- service: 'dhcp'
permanent: true
state: 'enabled'
- service: 'dns'
permanent: true
state: 'enabled'
zone: 'privateDNS'
- service: 'http'
state: 'enabled'
permanent: true
zone: 'public'
- service: 'https'
state: 'enabled'
permanent: true
zone: 'public'
- service: 'ssh'
state: 'enabled'
permanent: true
firewalld_zones:
- zone: 'home'
permanent: true
state: 'enabled'
interface: 'enp0s3'
- zone: 'public'
permanent: true
state: 'enabled'
interface: 'enp0s8'
pri_domain_name: 'test.vagrant.local'
roles:
- role: ansible-firewalld
tasks:
MIT
Larry Smith Jr.