mirror of
https://github.com/frappe/bench.git
synced 2024-09-23 12:39:01 +00:00
47 lines
1.3 KiB
YAML
Executable File
47 lines
1.3 KiB
YAML
Executable File
- name: Setup Firewall
|
|
user: root
|
|
hosts: localhost
|
|
|
|
tasks:
|
|
# For CentOS
|
|
- name: Enable SELinux
|
|
selinux: policy=targeted state=permissive
|
|
|
|
- name: Install firewalld
|
|
yum: name=firewalld state=present
|
|
when: ansible_distribution == 'CentOS'
|
|
|
|
- name: Enable Firewall
|
|
service: name=firewalld state=started enabled=yes
|
|
when: ansible_distribution == 'CentOS'
|
|
|
|
- name: Add firewall rules
|
|
firewalld: port={{ item }}/tcp permanent=true state=enabled
|
|
with_items:
|
|
- 80
|
|
- 443
|
|
- "{{ ssh_port }}"
|
|
when: ansible_distribution == 'CentOS'
|
|
|
|
- name: Restart Firewall
|
|
service: name=firewalld state=restarted enabled=yes
|
|
when: ansible_distribution == 'CentOS'
|
|
|
|
# For Ubuntu / Debian
|
|
- name: Install ufw
|
|
apt: name=ufw state=present
|
|
when: ansible_distribution == 'Ubuntu' or ansible_distribution == 'Debian'
|
|
|
|
- name: Enable Firewall
|
|
ufw: state=enabled policy=deny
|
|
when: ansible_distribution == 'Ubuntu' or ansible_distribution == 'Debian'
|
|
|
|
- name: Add firewall rules
|
|
ufw: rule=allow proto=tcp port={{ item }}
|
|
with_items:
|
|
- 80
|
|
- 443
|
|
- "{{ ssh_port }}"
|
|
when: ansible_distribution == 'Ubuntu' or ansible_distribution == 'Debian'
|
|
|