• ansible-firewalld
  • Requirements
  • Role Variables
  • Dependencies
  • Example Playbook
  • License
  • Author Information

ansible-firewalld

An Ansible role to manage firewalld

Requirements

None

Role Variables

---
# defaults file for ansible-firewalld

# Defines any custom zones to create/delete
# zone - name of zone
#
# present - whether custom zone is created/deleted
## present: true
### creates zone if not already present
## present: false
### deletes zone if present
firewalld_custom_zones: []
  # - zone: 'docker'
  #   state: 'enabled'
  #   present: false
  # - zone: 'privateDNS'
  #   state: 'enabled'
  #   present: true

# Defines firewall rules
firewalld_rules: []
  # # - service: 'dhcp'
  # #   permanent: true
  # #   zone: 'public'
  # - service: 'http'
  #   state: 'enabled'
  #   permanent: true
  #   zone: 'public'
  # - service: 'https'
  #   state: 'enabled'
  #   permanent: true
  #   zone: 'public'
  # - service: 'ssh'
  #   state: 'enabled'
  #   permanent: true
  #   zone: 'public'

# Defines firewall zones (default zones - not custom zones)
firewalld_zones: []
  # - zone: 'home'
  #   permanent: true
  #   state: 'enabled'
  #   interface: 'enp0s3'
  # - zone: 'public'
  #   permanent: true
  #   state: 'enabled'
  #   interface: 'enp0s8'

Dependencies

None

Example Playbook

---
- hosts: test-nodes
  vars:
    firewalld_custom_zones:
      - zone: 'privateDNS'
        state: 'enabled'
        present: true
    firewalld_enable_immediately: true
    firewalld_rules:
      - service: 'dhcp'
        permanent: true
        state: 'enabled'
      - service: 'dns'
        permanent: true
        state: 'enabled'
        zone: 'privateDNS'
      - service: 'http'
        state: 'enabled'
        permanent: true
        zone: 'public'
      - service: 'https'
        state: 'enabled'
        permanent: true
        zone: 'public'
      - service: 'ssh'
        state: 'enabled'
        permanent: true
    firewalld_zones:
      - zone: 'home'
        permanent: true
        state: 'enabled'
        interface: 'enp0s3'
      - zone: 'public'
        permanent: true
        state: 'enabled'
        interface: 'enp0s8'
    pri_domain_name: 'test.vagrant.local'
  roles:
    - role: ansible-firewalld
  tasks:

License

MIT

Author Information

Larry Smith Jr.

• @mrlesmithjr
• EverythingShouldBeVirtual
• mrlesmithjr.com
• mrlesmithjr [at] gmail.com