项目作者: mrlesmithjr

项目描述 :
高级语言:
项目地址: git://github.com/mrlesmithjr/ansible-firewalld.git
创建时间: 2017-07-21T20:17:38Z
项目社区:https://github.com/mrlesmithjr/ansible-firewalld

开源协议:MIT License

下载


ansible-firewalld

An Ansible role to manage firewalld

Requirements

None

Role Variables

  1. ---
  2. # defaults file for ansible-firewalld
  3. # Defines any custom zones to create/delete
  4. # zone - name of zone
  5. #
  6. # present - whether custom zone is created/deleted
  7. ## present: true
  8. ### creates zone if not already present
  9. ## present: false
  10. ### deletes zone if present
  11. firewalld_custom_zones: []
  12. # - zone: 'docker'
  13. # state: 'enabled'
  14. # present: false
  15. # - zone: 'privateDNS'
  16. # state: 'enabled'
  17. # present: true
  18. # Defines firewall rules
  19. firewalld_rules: []
  20. # # - service: 'dhcp'
  21. # # permanent: true
  22. # # zone: 'public'
  23. # - service: 'http'
  24. # state: 'enabled'
  25. # permanent: true
  26. # zone: 'public'
  27. # - service: 'https'
  28. # state: 'enabled'
  29. # permanent: true
  30. # zone: 'public'
  31. # - service: 'ssh'
  32. # state: 'enabled'
  33. # permanent: true
  34. # zone: 'public'
  35. # Defines firewall zones (default zones - not custom zones)
  36. firewalld_zones: []
  37. # - zone: 'home'
  38. # permanent: true
  39. # state: 'enabled'
  40. # interface: 'enp0s3'
  41. # - zone: 'public'
  42. # permanent: true
  43. # state: 'enabled'
  44. # interface: 'enp0s8'

Dependencies

None

Example Playbook

  1. ---
  2. - hosts: test-nodes
  3. vars:
  4. firewalld_custom_zones:
  5. - zone: 'privateDNS'
  6. state: 'enabled'
  7. present: true
  8. firewalld_enable_immediately: true
  9. firewalld_rules:
  10. - service: 'dhcp'
  11. permanent: true
  12. state: 'enabled'
  13. - service: 'dns'
  14. permanent: true
  15. state: 'enabled'
  16. zone: 'privateDNS'
  17. - service: 'http'
  18. state: 'enabled'
  19. permanent: true
  20. zone: 'public'
  21. - service: 'https'
  22. state: 'enabled'
  23. permanent: true
  24. zone: 'public'
  25. - service: 'ssh'
  26. state: 'enabled'
  27. permanent: true
  28. firewalld_zones:
  29. - zone: 'home'
  30. permanent: true
  31. state: 'enabled'
  32. interface: 'enp0s3'
  33. - zone: 'public'
  34. permanent: true
  35. state: 'enabled'
  36. interface: 'enp0s8'
  37. pri_domain_name: 'test.vagrant.local'
  38. roles:
  39. - role: ansible-firewalld
  40. tasks:

License

MIT

Author Information

Larry Smith Jr.