2023-10-26 21:34:06 +01:00
|
|
|
- name: Install nftables
|
|
|
|
|
package:
|
|
|
|
|
name: nftables
|
|
|
|
|
become: true
|
|
|
|
|
|
|
|
|
|
- name: Copy firewall config
|
|
|
|
|
template:
|
|
|
|
|
src: files/nftables.conf
|
|
|
|
|
dest: /etc/nftables.conf
|
|
|
|
|
validate: nft -c -f %s
|
2023-11-05 21:43:16 +00:00
|
|
|
mode: "644"
|
2023-10-26 21:34:06 +01:00
|
|
|
become: true
|
2023-11-03 18:06:36 +00:00
|
|
|
notify: reload nftables
|
2023-10-26 21:34:06 +01:00
|
|
|
|
|
|
|
|
- name: Enable nftables
|
|
|
|
|
service:
|
|
|
|
|
name: nftables
|
|
|
|
|
enabled: true
|
|
|
|
|
state: started
|
|
|
|
|
become: true
|
