minifirewall: the tail file can be overwritten, or not

CHANGELOG.md

@@ -16,11 +16,12 @@ The **patch** part changes incrementally at each release.
 * kibana: log messages go to /var/log/kibana/kibana.log
 
 ### Changed
+* evolinux-users: add sudo right for bkctld check
+* minifirewall: the tail file can be overwritten, or not (default: `True`)
+* nagios-nrpe: change nrpe check for bkctld command
 * rbenv: install Ruby 2.5.1 by default
 * rbenv: switch from copy to lineinfile for default gems
 * squid: whiteliste some news sites
-* nagios-nrpe: change nrpe check for bkctld command
-* evolinux-users: add sudo right for bkctld check
 
 ### Fixed
 

minifirewall/defaults/main.yml

@@ -1,5 +1,6 @@
 ---
 minifirewall_tail_included: False
+minifirewall_tail_force: yes
 
 minifirewall_git_url: "https://forge.evolix.org/minifirewall.git"
 minifirewall_checkout_path: "/tmp/minifirewall"

minifirewall/tasks/tail.yml

@@ -3,7 +3,7 @@
   template:
     src: "{{ item }}"
     dest: /etc/default/minifirewall.tail
-    force: yes
+    force: "{{ minifirewall_tail_force | bool | ternary('yes', 'no') }}"
   with_first_found:
   - "templates/minifirewall-tail/minifirewall.{{ inventory_hostname }}.tail.j2"
   - "templates/minifirewall-tail/minifirewall.{{ host_group }}.tail.j2"