feat: Merge rules and tables in one file

This commit is contained in:
pulsar89.5 2023-12-28 17:39:20 +01:00
parent 35d31eb752
commit 3d6d1693e3
4 changed files with 14 additions and 14 deletions

View File

@ -33,10 +33,8 @@
group: root
mode: u=rw,g=,o=
src: "{{ role_path }}/templates/rules.conf.j2"
dest: "/srv/nftables/rules_{{ item.filename }}.conf"
loop: "{{ nftables_rules }}"
loop_control:
label: "{{ item.filename }}"
dest: "/srv/nftables/rules.conf"
when: nftables_rules | length > 0
become: true
notify: Redémarrer nftables.service
@ -45,10 +43,8 @@
owner: root
group: root
mode: u=rw,g=,o=
src: "{{ role_path }}/templates/tables.conf.j2"
dest: "/srv/nftables/tables_{{ item.filename }}.conf"
loop: "{{ nftables_tables }}"
loop_control:
label: "{{ item.filename }}"
src: tables.conf.j2
dest: /srv/nftables/tables.conf
when: nftables_tables | length > 0
become: true
notify: Redémarrer nftables.service

View File

@ -12,6 +12,9 @@
owner: root
group: root
mode: u=rwx,g=rx,o=rx
state: directory
state: "{{ item }}"
path: /srv/nftables
become: true
loop:
- absent
- directory

View File

@ -16,8 +16,8 @@ table inet filter {
# accept neighbour discovery otherwise IPv6 connectivity breaks.
ip6 nexthdr icmpv6 icmpv6 type {nd-neighbor-solicit, nd-router-advert, nd-neighbor-advert} accept
# include specifics rules
include "/srv/nftables/rules_*.conf"
# include specific rules
include "/srv/nftables/rules.conf"
# count and drop any other traffic
counter drop

View File

@ -1,5 +1,6 @@
# {{ ansible_managed }}
{% for item in nftables_rules %}
{% for rule in item.rules %}
{{ rule }}
# {{ item.comment }}
{{ item.rules | join('\n') }}
{% endfor %}