mirror of
https://github.com/frappe/bench.git
synced 2025-01-10 09:02:10 +00:00
44 lines
1.2 KiB
YAML
44 lines
1.2 KiB
YAML
|
- name: Setup Firewall
|
||
|
|
user: root
|
||
|
|
hosts: localhost
|
||
|
|
|
||
|
|
tasks:
|
||
|
|
# For CentOS
|
||
|
|
- name: Install firewalld
|
||
|
|
yum: name=firewalld state=present
|
||
|
|
when: ansible_distribution == 'CentOS'
|
||
|
|
|
||
|
|
- name: Enable Firewall
|
||
|
|
service: name=firewalld state=started enabled=yes
|
||
|
|
when: ansible_distribution == 'CentOS'
|
||
|
|
|
||
|
|
- name: Add firewall rules
|
||
|
|
firewalld: port={{ item }}/tcp permanent=true state=enabled
|
||
|
|
with_items:
|
||
|
|
- 80
|
||
|
|
- 443
|
||
|
|
- 22
|
||
|
|
when: ansible_distribution == 'CentOS'
|
||
|
|
|
||
|
|
- name: Restart Firewall
|
||
|
|
service: name=firewalld state=restarted enabled=yes
|
||
|
|
when: ansible_distribution == 'CentOS'
|
||
|
|
|
||
|
|
# For Ubuntu / Debian
|
||
|
|
- name: Install ufw
|
||
|
|
apt: name=ufw state=present
|
||
|
|
when: ansible_distribution == 'Ubuntu' or ansible_distribution == 'Debian'
|
||
|
|
|
||
|
|
- name: Enable Firewall
|
||
|
|
ufw: state=enabled policy=deny
|
||
|
|
when: ansible_distribution == 'Ubuntu' or ansible_distribution == 'Debian'
|
||
|
|
|
||
|
|
- name: Add firewall rules
|
||
|
|
ufw: rule=allow proto=tcp port={{ item }}
|
||
|
|
with_items:
|
||
|
|
- 80
|
||
|
|
- 443
|
||
|
|
- 22
|
||
|
|
when: ansible_distribution == 'Ubuntu' or ansible_distribution == 'Debian'
|
||
|
|
|