---

- name: dependencies are satisfied
  apt:
    name: iptables
    state: present

- name: init script is copied
  copy:
    src: minifirewall
    dest: /etc/init.d/minifirewall
    force: "{{ minifirewall_force_upgrade_script | default('no') }}"
    mode: "0700"
    owner: root
    group: root

- name: include directory is present
  file:
    path: /etc/minifirewall.d/
    state: directory
    owner: root
    group: root
    mode: "0700"

- name: configuration is copied
  copy:
    src: minifirewall.conf
    dest: "/etc/default/minifirewall"
    force: "{{ minifirewall_force_upgrade_config | default('no') }}"
    mode: "0600"
    owner: root
    group: root