2016-11-07 14:00:57 +01:00
# minifirewall
2017-01-06 15:50:48 +01:00
Installation of minifirewall a simple and versatile local firewall.
2016-11-07 14:00:57 +01:00
The firewall is not started by default, but an init script is installed.
## Tasks
Everything is in the `tasks/main.yml` file.
## Available variables
* `minifirewall_int` : which network interface to protect (default: detected default ipv4 interface)
* `minifirewall_ipv6_enabled` : (default: `on` )
* `minifirewall_int_lan` : (default: IP/32)
* `minifirewall_trusted_ips` : with IP/hosts should be trusted for full access (default: none)
* `minifirewall_privilegied_ips` : with IP/hosts should be trusted for restricted access (default: none)
2018-08-30 17:06:21 +02:00
* `minifirewall_tail_included` : source a "tail" file at the end of the main config file (default: `False` )
* `minifirewall_tail_force` : overwrite the "tail" file (default: `True` )
2018-08-30 17:04:14 +02:00
* `minifirewall_restart_if_needed` : should the restart handler be executed (default: `True` )
2018-08-30 17:05:30 +02:00
* `minifirewall_restart_force` : force restart minifirewall at the end of the role execution (default: `False` )
2018-08-30 17:06:21 +02:00
* `minifirewall_autostart` : enable minifirewall start at boot time (default: `False` )
2017-01-06 15:50:48 +01:00
The full list of variables (with default values) can be found in `defaults/main.yml` .
**Some IP/hosts must be configured or the server will be inaccessible via network.**
2017-07-13 15:06:49 +02:00
## minifirewall-tail
Compiles a `minifirewall.tail` file based on templates and source it at the end of minifirewall configuration.
Templates are looked up in that order :
1. `{{ playbook_dir}}/templates/minifirewall-tail/minifirewall.{{ inventory_hostname}}.tail.j2`
2. `{{ playbook_dir}}/templates/minifirewall-tail/minifirewall.{{ host_group}}.tail.j2` (NB : `host_group` is not a core variable, it must be defined in `group_vars` files.)
3. `{{ playbook_dir}}/templates/minifirewall-tail/minifirewall.default.tail.j2`
If nothing is found, the role falls back to the template embedded in the role : `templates/minifirewall.default.tail.j2`
