ansible-role-mirrors
/
ansible-ufw
mirror of https://github.com/Oefenweb/ansible-ufw.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
Ansible role to set up ufw in Debian-like systems
38 Commits 2 Branches 56 Tags 235 KiB
Jinja 75.7%
Dockerfile 24.3%
Go to file
Mischa ter Smitten 8eaa8e27bf Consistency change [ci skip] 2015-07-13 23:13:20 +02:00
defaults Fixed typo: uwf ==> ufw 2015-07-09 15:59:55 +02:00
files Initial version 2014-09-03 11:20:49 +02:00
handlers Merge commit 'refs/pull/12/head' of github.com:Oefenweb/ansible-ufw into use-notify-action-on-idempotents-tasks 2014-12-17 10:28:53 +01:00
meta Improved meta information. 2014-10-15 17:00:17 +02:00
tasks Fixed typo: uwf ==> ufw 2015-07-09 15:59:55 +02:00
templates/etc/ansible/facts.d Fixed typo: uwf ==> ufw 2015-07-09 15:59:55 +02:00
tests Add Vagrantfile for testing provisions 2014-10-15 15:43:42 +02:00
vars Initial version 2014-09-03 11:20:49 +02:00
.gitignore Consistency change [ci skip] 2015-07-13 23:13:20 +02:00
.travis.yml Only build PR's and master 2015-06-18 11:53:36 +02:00
LICENSE.txt Initial commit 2014-09-03 11:15:51 +02:00
README.md Fixed typo: uwf ==> ufw 2015-07-09 15:59:55 +02:00
Vagrantfile Updated Debian wheezy (vagrant) box 2015-05-20 12:28:38 +02:00

README.md

ufw

Build Status Ansible Galaxy

Set up ufw in Debian-like systems.

Requirements

None

Variables

  • ufw_default_policy [default: deny]: Default policy
  • ufw_logging [default: off]: Log level
  • ufw_rules [default: see defaults/main.yml]: Rules to apply

Dependencies

None

Example

---
- hosts: all
  roles:
  - ufw
Allow ssh
ufw_rules:
  - rule: allow
    to_port: 22
    protocol: tcp
Allow all traffic on eth1
ufw_rules:
  - rule: allow
    interface: eth1
    to_port: ''
Allow snmp traffic from 1.2.3.4 on eth0
ufw_rules:
  - rule: allow
    interface: eth0
    from_ip: 1.2.3.4
    to_port: 161
    protocol: udp

TODO

Make use of omit, available in ansible 1.8

License

MIT

Author Information

Mischa ter Smitten (based on work of weareinteractive)

Feedback, bug-reports, requests, ...

Are welcome!