ansible-roles/minifirewall/tasks/main.yml

---

- name: Compose minifirewall_restart_handler_name variable
  set_fact:
    minifirewall_restart_handler_name: "{{ minifirewall_restart_if_needed | bool | ternary('restart minifirewall', 'restart minifirewall (noop)') }}"

- name: Fail if minifirewall_main_file is defined
  fail:
    msg: "Variable minifirewall_main_file is deprecated and not configurable anymore."
  when: minifirewall_main_file is defined

- include: install.yml

- include: config.yml
  when: minifirewall_update_config | bool

- include: nrpe.yml

- include: activate.yml

- include: tail.yml
  when: minifirewall_tail_included | bool

- name: Force restart minifirewall
  command: /etc/init.d/minifirewall restart
  register: minifirewall_init_restart
  failed_when: "'starting IPTables rules is now finish : OK' not in minifirewall_init_restart.stdout"
  when: minifirewall_restart_force | bool
Squash: conventions, evolinux, etc-git… 2016-11-07 14:00:57 +01:00			`---`

minifirewall: fix warnings ansible-lint 2020-01-08 17:19:13 +01:00			`- name: Compose minifirewall_restart_handler_name variable`
			`set_fact:`
Improve Ansible syntax replace « x \| changed » by « x is changed » add explicit « bool » filter use « length » filter instead of string comparison 2021-05-09 23:06:42 +02:00			`minifirewall_restart_handler_name: "{{ minifirewall_restart_if_needed \| bool \| ternary('restart minifirewall', 'restart minifirewall (noop)') }}"`
minifirewall: add a variable to disable the restart handler 2018-08-30 17:04:14 +02:00
minifirewall: upstream release 22.03.1 and use includes directory 2022-03-15 23:07:33 +01:00			`- name: Fail if minifirewall_main_file is defined`
			`fail:`
			`msg: "Variable minifirewall_main_file is deprecated and not configurable anymore."`
			`when: minifirewall_main_file is defined`

Minifirewall: extend configuration abilities with blocks 2017-01-06 15:50:48 +01:00			`- include: install.yml`
Squash: conventions, evolinux, etc-git… 2016-11-07 14:00:57 +01:00
Minifirewall: extend configuration abilities with blocks 2017-01-06 15:50:48 +01:00			`- include: config.yml`
minifirewall: upstream release 22.03.1 and use includes directory 2022-03-15 23:07:33 +01:00			`when: minifirewall_update_config \| bool`
Add autostart option 2017-05-02 10:56:12 +02:00
Add minifirewal_status and check_minifirewall minifirewall_status returns "started" on stdout and exit code 0, or "stopped" on stdout and exit code 1. The state of minifirewall is determined by looking for common iptables rules applied by minifirewall. check_minifirewall is an NRPE plugin for minifirewall. It returns: * 0 (OK) if the firewall state is consistent with its configuration (from the alert5 script) * 1 (WARNING) if the firewall is started but alert5 is not configured properly * 2 (CRITICAL) if the firewall is not running but it should be. 2018-04-02 21:04:26 +02:00			`- include: nrpe.yml`

Add autostart option 2017-05-02 10:56:12 +02:00			`- include: activate.yml`
minifirewall: merge the "tail" pattern back into the main role 2017-07-13 15:06:49 +02:00
			`- include: tail.yml`
Improve Ansible syntax replace « x \| changed » by « x is changed » add explicit « bool » filter use « length » filter instead of string comparison 2021-05-09 23:06:42 +02:00			`when: minifirewall_tail_included \| bool`
minifirewall: add a variable to force a restart of the firewall 2018-08-30 17:05:30 +02:00
whitespaces 2019-05-14 13:57:31 +02:00			`- name: Force restart minifirewall`
minifirewall: restore "force-restart" and fix "restart-if-needed" 2022-03-28 13:27:19 +02:00			`command: /etc/init.d/minifirewall restart`
			`register: minifirewall_init_restart`
			`failed_when: "'starting IPTables rules is now finish : OK' not in minifirewall_init_restart.stdout"`
			`when: minifirewall_restart_force \| bool`