gregandev/rpi-ansible
1
0
Fork 0
mirror of https://github.com/ruanbekker/rpi-ansible.git synced 2025-04-20 01:11:38 +02:00
Code Issues Projects Releases Wiki Activity

add firewall configuration

Browse Source
This commit is contained in:
Glenn K. Lockwood 2018-10-28 22:18:51 -07:00
parent d62408a9aa
commit bd52fd5733
2 changed files with 24 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
roles/common/tasks/main.yml
View File

@ -79,3 +79,26 @@
- include: software.yml - include: software.yml
- include: users.yml - include: users.yml
- include: raspi-config.yml - include: raspi-config.yml
# Configure firewall
- name: allow SSH through UFW
ufw:
rule: allow
port: ssh
proto: tcp
log: yes
- name: set default incoming UFW policy to deny
ufw:
direction: incoming
policy: deny
- name: set default outgoing UFW policy to deny
ufw:
direction: outgoing
policy: allow
- name: enable UFW
ufw:
state: enabled
logging: yes

1
roles/common/tasks/software.yml
View File

@ -31,5 +31,6 @@
- vim - vim
- git - git
- python-pip - python-pip
- ufw
tags: tags:
- sw - sw