playbook.yml aktualisiert

This commit is contained in:
az 2024-05-07 22:49:26 +02:00
parent 688ecab5cf
commit e6c678c0eb
1 changed files with 13 additions and 8 deletions

View File

@ -46,6 +46,8 @@
dest: '{{ item.destination }}' dest: '{{ item.destination }}'
port: '22' port: '22'
with_items: with_items:
- { direction: 'in', destination: '10.0.0.1/32' }
- { direction: 'out', destination: '10.0.0.1/32' }
- { direction: 'in', destination: '10.16.109.252/32' } - { direction: 'in', destination: '10.16.109.252/32' }
- { direction: 'out', destination: '10.16.109.252/32' } - { direction: 'out', destination: '10.16.109.252/32' }
- { direction: 'in', destination: '10.16.1.1/32' } - { direction: 'in', destination: '10.16.1.1/32' }
@ -59,6 +61,8 @@
dest: '{{ item.destination }}' dest: '{{ item.destination }}'
port: '443' port: '443'
with_items: with_items:
- { direction: 'in', destination: '10.0.0.1/32' }
- { direction: 'out', destination: '10.0.0.1/32' }
- { direction: 'in', destination: '10.16.109.252/32' } - { direction: 'in', destination: '10.16.109.252/32' }
- { direction: 'out', destination: '10.16.109.252/32' } - { direction: 'out', destination: '10.16.109.252/32' }
- { direction: 'in', destination: '10.16.1.1/32' } - { direction: 'in', destination: '10.16.1.1/32' }
@ -66,19 +70,11 @@
- { direction: 'in', destination: '162.55.5.40/32' } - { direction: 'in', destination: '162.55.5.40/32' }
- { direction: 'out', destination: '162.55.5.40/32' } - { direction: 'out', destination: '162.55.5.40/32' }
- name: Enable ufw
ufw: state=enabled
- name: Allow dns - name: Allow dns
ufw: rule={{ item.rule }} port={{ item.port }} ufw: rule={{ item.rule }} port={{ item.port }}
with_items: with_items:
- { rule: 'allow', port: '53'} - { rule: 'allow', port: '53'}
- name: start ufw service
service:
name: ufw
state: restarted
- name: purge some prior installed packages - name: purge some prior installed packages
apt: apt:
@ -116,3 +112,12 @@
- kicad-doc-de - kicad-doc-de
autoremove: yes autoremove: yes
state: absent state: absent
- name: Enable ufw
ufw: state=disabled
- name: start ufw service
service:
name: ufw
state: restarted