Skip to content

firewall: add role to configure ufw firewall#7

Open
ljmf00 wants to merge 1 commit into
ipleiria-labrob:masterfrom
ljmf00:add-ufw-firewall
Open

firewall: add role to configure ufw firewall#7
ljmf00 wants to merge 1 commit into
ipleiria-labrob:masterfrom
ljmf00:add-ufw-firewall

Conversation

@ljmf00

@ljmf00 ljmf00 commented Nov 3, 2020

Copy link
Copy Markdown
Member

Signed-off-by: Luís Ferreira contact@lsferreira.net


  • Test configuration locally

@ljmf00 ljmf00 changed the title firewall: add role to configure ufw firewall WIP: firewall: add role to configure ufw firewall Nov 3, 2020
@ljmf00

ljmf00 commented Nov 3, 2020

Copy link
Copy Markdown
Member Author

Need local testing for firewall_forward_packets to make sure will not mess up with VPN.

Comment thread roles/firewall/tasks/main.yml Outdated
@@ -0,0 +1,43 @@
---

- name: Install 'ufw'

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Keep the style, lowercase and don't quote ufw.

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

done

Comment thread roles/firewall/tasks/main.yml Outdated
ufw:
policy: deny

- name: Set allow default policy for forwarding

@FFY00 FFY00 Nov 8, 2020

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Shouldn't we be installing our own config instead of editing this?

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I added a template to build our own config, can you review?

Signed-off-by: Luís Ferreira <contact@lsferreira.net>
@ljmf00 ljmf00 changed the title WIP: firewall: add role to configure ufw firewall firewall: add role to configure ufw firewall Nov 10, 2020
@ljmf00

ljmf00 commented Nov 10, 2020

Copy link
Copy Markdown
Member Author

This is no longer in WIP state. I tested this config on the server and seems working fine.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants