53 lines
1.5 KiB
YAML
53 lines
1.5 KiB
YAML
---
|
|
# tasks file for nftables
|
|
|
|
- name: Déployer la configuration générale
|
|
ansible.builtin.template:
|
|
owner: root
|
|
group: root
|
|
mode: u=rw,g=,o=
|
|
src: nftables.conf.j2
|
|
dest: /etc/nftables.conf
|
|
become: true
|
|
notify: Redémarrer nftables.service
|
|
|
|
#- name: Construire la liste des règles
|
|
# ansible.builtin.set_fact:
|
|
# nftables_rules: "{{ nftables_rules + rule }}"
|
|
# loop: "{{ lookup('ansible.builtin.varnames', '^nftables_rules.+', wantlist=True) }}"
|
|
# vars:
|
|
# rule: "{{ lookup('ansible.builtin.vars', item, default='') }}"
|
|
#
|
|
#- name: Construire la liste des tables
|
|
# ansible.builtin.set_fact:
|
|
# nftables_tables: "{{ nftables_tables + table }}"
|
|
# loop: "{{ lookup('ansible.builtin.varnames', '^nftables_tables.+', wantlist=True) }}"
|
|
# vars:
|
|
# table: "{{ lookup('ansible.builtin.vars', item, default='') }}"
|
|
|
|
- name: Déployer les règles
|
|
ansible.builtin.template:
|
|
owner: root
|
|
group: root
|
|
mode: u=rw,g=,o=
|
|
src: "{{ role_path }}/templates/rules.conf.j2"
|
|
dest: "/srv/nftables/rules_{{ item.filename }}.conf"
|
|
loop: "{{ nftables_rules }}"
|
|
loop_control:
|
|
label: "{{ item.filename }}"
|
|
become: true
|
|
notify: Redémarrer nftables.service
|
|
|
|
- name: Déployer les tables
|
|
ansible.builtin.template:
|
|
owner: root
|
|
group: root
|
|
mode: u=rw,g=,o=
|
|
src: "{{ role_path }}/templates/tables.conf.j2"
|
|
dest: "/srv/nftables/tables_{{ item.filename }}.conf"
|
|
loop: "{{ nftables_tables }}"
|
|
loop_control:
|
|
label: "{{ item.filename }}"
|
|
become: true
|
|
notify: Redémarrer nftables.service
|