mirror of
https://github.com/frappe/bench.git
synced 2025-01-10 17:24:41 +00:00
53 lines
1.4 KiB
YAML
53 lines
1.4 KiB
YAML
---
|
|
- name: Setup Firewall
|
|
user: root
|
|
hosts: localhost
|
|
|
|
tasks:
|
|
# For CentOS
|
|
- name: Enable SELinux
|
|
selinux: policy=targeted state=permissive
|
|
when: ansible_distribution == 'CentOS'
|
|
|
|
- name: Install firewalld
|
|
yum: name=firewalld state=present
|
|
when: ansible_distribution == 'CentOS'
|
|
|
|
- name: Enable Firewall
|
|
service: name=firewalld state=started enabled=yes
|
|
when: ansible_distribution == 'CentOS'
|
|
|
|
- name: Add firewall rules
|
|
firewalld: port={{ item }}/tcp permanent=true state=enabled
|
|
with_items:
|
|
- 80
|
|
- 443
|
|
- "{{ ssh_port }}"
|
|
when: ansible_distribution == 'CentOS'
|
|
|
|
- name: Restart Firewall
|
|
service: name=firewalld state=restarted enabled=yes
|
|
when: ansible_distribution == 'CentOS'
|
|
|
|
# For Ubuntu / Debian
|
|
- name: Install ufw
|
|
apt:
|
|
state: present
|
|
force: yes
|
|
pkg:
|
|
- python-selinux
|
|
- ufw
|
|
when: ansible_distribution == 'Ubuntu' or ansible_distribution == 'Debian'
|
|
|
|
- name: Enable Firewall
|
|
ufw: state=enabled policy=deny
|
|
when: ansible_distribution == 'Ubuntu' or ansible_distribution == 'Debian'
|
|
|
|
- name: Add firewall rules
|
|
ufw: rule=allow proto=tcp port={{ item }}
|
|
with_items:
|
|
- 80
|
|
- 443
|
|
- "{{ ssh_port }}"
|
|
when: ansible_distribution == 'Ubuntu' or ansible_distribution == 'Debian'
|
|
... |