mirror of
https://github.com/frappe/bench.git
synced 2024-11-12 08:16:28 +00:00
97d44518d3
* Added command to setup firewall * Added validation to check for ansible, added ufw for ubuntu and debian
44 lines
1.2 KiB
YAML
Executable File
44 lines
1.2 KiB
YAML
Executable File
- name: Setup Firewall
|
|
user: root
|
|
hosts: localhost
|
|
|
|
tasks:
|
|
# For CentOS
|
|
- name: Install firewalld
|
|
yum: name=firewalld state=present
|
|
when: ansible_distribution == 'CentOS'
|
|
|
|
- name: Enable Firewall
|
|
service: name=firewalld state=started enabled=yes
|
|
when: ansible_distribution == 'CentOS'
|
|
|
|
- name: Add firewall rules
|
|
firewalld: port={{ item }}/tcp permanent=true state=enabled
|
|
with_items:
|
|
- 80
|
|
- 443
|
|
- 22
|
|
when: ansible_distribution == 'CentOS'
|
|
|
|
- name: Restart Firewall
|
|
service: name=firewalld state=restarted enabled=yes
|
|
when: ansible_distribution == 'CentOS'
|
|
|
|
# For Ubuntu / Debian
|
|
- name: Install ufw
|
|
apt: name=ufw state=present
|
|
when: ansible_distribution == 'Ubuntu' or ansible_distribution == 'Debian'
|
|
|
|
- name: Enable Firewall
|
|
ufw: state=enabled policy=deny
|
|
when: ansible_distribution == 'Ubuntu' or ansible_distribution == 'Debian'
|
|
|
|
- name: Add firewall rules
|
|
ufw: rule=allow proto=tcp port={{ item }}
|
|
with_items:
|
|
- 80
|
|
- 443
|
|
- 22
|
|
when: ansible_distribution == 'Ubuntu' or ansible_distribution == 'Debian'
|
|
|