jebovic.ufw

UFW

Install and configure ufw

This role is a part of my OPS project, follow this link to see it in action. OPS provides a lot of stuff, like a vagrant file for development VMs, playbooks for roles orchestration, inventory files, examples for roles configuration, ansible configuration file, and many more.

Compatibility

Tested and approved on :

Debian jessie (8+)
Ubuntu Trusty (14.04 LTS)
Ubuntu Xenial (16.04 LTS)

Role Variables

# UFW install configuration
ufw_packages:
  - ufw

# UFW basic configuration
ufw_ipv6: "yes"
ufw_default_input_policy: DROP
ufw_default_output_policy: ACCEPT
ufw_default_forward_policy: DROP
ufw_default_application_policy: SKIP
ufw_logging: "off"

# UFW service configuration
ufw_state: enabled
ufw_reset: yes

# UFW custom configuration
ufw_rules: [{ port: 22, rule: allow }]
ufw_applications: []

Example Playbook

- hosts: servers
  roles:
     - { role: jebovic.ufw }

Example : config

# firewall rules
ufw_rules:
  - { port: 22, rule: allow }
  - { port: 80, rule: allow }
  - { port: 443, rule: allow }
  - { port: 8080, rule: allow }                             # Traefik UI
  - { port: 8300, rule: allow }                             # Consul cluster
  - { port: 8301, rule: allow }                             # Consul cluster
  - { port: "{{ consul_http_port }}", rule: allow }         # Consul UI
  - { port: 8600, rule: allow, proto: any }                 # Consul DNS server
  - { port: 8600, direction: out, rule: allow, proto: any } # Consul DNS server