Ansible tcpwrappers Role

This is an Ansible role that sets up the TCP Wrappers security system using the /etc/hosts.allow and /etc/hosts.deny files.

Role Variables

You can find a list of all the default settings for this role in defaults/main.yml.

Example Playbook

Here’s an example playbook:

---

- hosts: all
  roles:    
    - role: amtega.tcpwrappers
      vars:
        tcpwrappers_allow:
          - daemons:
              - ssh
              - ftp
            clients:
              - localhost
            state: present

          - daemons:
              - ssh
              - ftp
            clients:
              - LOCAL
            state: present

        tcpwrappers_deny:
          - daemons:
              - ALL
            clients:
              - ALL
            state: present

Testing

To test, use molecule with Docker containers.

cd amtega.tcpwrappers

molecule test

License

Copyright (C) 2022 AMTEGA - Xunta de Galicia

This role is free software: you can share or change it under these terms:

GNU General Public License version 3, or any later version; or the European Union Public License, either Version 1.2 or newer ones once approved by the European Commission.

This role comes with no warranty; it’s given hoping it will be helpful, but there are no guarantees that it will work for a specific purpose. Check the GNU General Public License or the European Union Public License for more details.

Author Information

• Carlos Chedas Fernández
• Daniel Sánchez Fábregas
• Juan Antonio Valiño García