homeserver/roles/oefenweb.ufw/tasks/fix-dropped-ssh-sessions.yml

18 lines
466 B
YAML

# tasks file for ufw
---
- name: check if conntrack exists
stat:
path: /proc/sys/net/netfilter/nf_conntrack_tcp_be_liberal
register: _nf_conntrack_tcp_be_liberal
- name: fix dropped ssh sessions | configure kernel
sysctl:
name: net.netfilter.nf_conntrack_tcp_be_liberal
value: '1'
state: present
sysctl_set: true
reload: true
when: _nf_conntrack_tcp_be_liberal.stat.exists
tags:
- ufw-fix-dropped-ssh-sessions-configure-kernel