Commit graph

21 commits

Author SHA1 Message Date
Patrick Marchand 63d12e4dcf Whitespace fix for minifirewall/defaults/main.yml 2019-07-04 20:14:53 -04:00
Patrick Marchand ff9e1e80aa Fix for minifirewall bug in 8d352f100e
All checks were successful
continuous-integration/drone/push Build is passing
The default OS websites would override all the default http sites.
I removed those default http sites from the file and put them in
the minifirewall_http_sites list. Since this would override the
list anyway, it doesnt change much, except that someone who doesnt
want to use the OS default websites should also override the related
variables (minifirewall_default_*_http_sites)

fixes #65
2019-07-03 09:04:17 -04:00
Patrick Marchand 8d352f100e Adds default http sites whitelist for ubuntu
Some checks reported errors
continuous-integration/drone/push Build encountered an error
Ubuntu and Debian do not use the same apt sources. I created two
new default variables (minifirewall_default_xxx_http_sites) that
contain a list of the sites required for apt to work. I then removed
the debian sites from the default file and added two new tasks to
prepend the contents of these variables to HTTPSITES.

fixes #65
2019-07-02 16:12:09 -04:00
Jérémy Lecour 2bcc1133c0 minifirewall: all variables are configurable
By default, a Null value keeps the variable current value as-is.
Set an Array (can be empty) to replace the value.
2018-12-04 14:49:50 +01:00
Jérémy Lecour c3e4a78442 minifirewall: main file is configurable 2018-12-04 14:45:48 +01:00
Jérémy Lecour c25c3c6a31 minifirewall: improve variables values and documentation 2018-08-30 17:06:21 +02:00
Jérémy Lecour 9787328a0b minifirewall: add a variable to force a restart of the firewall 2018-08-30 17:05:30 +02:00
Jérémy Lecour 96cd04ae40 minifirewall: add a variable to disable the restart handler 2018-08-30 17:04:14 +02:00
Jérémy Lecour d67abef13d minifirewall: the tail file can be overwritten, or not 2018-06-04 16:31:36 +02:00
Jérémy Lecour e984e46b83 minifirewall: nagios plugins directory is configurable 2018-04-06 09:52:18 +02:00
Jérémy Lecour aeba94bcba default/additional variables
List of hosts/ip are a combination of 2 lists allowing overrides
2017-12-20 18:04:54 +01:00
Jérémy Lecour 8ef9554746 Combine evolix and additional trusted IP addresses 2017-11-15 23:57:58 +01:00
Jérémy Lecour 97b0225232 Minifirewall can deal with evomaintenance
Each role has to know how to deal with the other.
Otherwise, depending on order of execution, the firewall might not
allow connections for evomaintenance
2017-10-08 00:00:24 +02:00
Jérémy Lecour 3d7a544820 minifirewall: restore default ports
Copied from
https://forge.evolix.org/projects/minifirewall/repository/revisions/master/entry/minifirewall.conf
2017-10-07 10:59:22 +02:00
Jérémy Lecour 685282bf93 minifirewall: fallback when no trusted ip is provided 2017-09-14 14:26:44 +02:00
Gregory Colpart 409ac0d503 ajust minfirewall default config (mostly let port 22 in public port to avoid failure during Ansible connection) 2017-08-31 04:05:33 +02:00
Jérémy Lecour b2278a151c minifirewall: merge the "tail" pattern back into the main role 2017-07-13 15:06:49 +02:00
Tristan PILAT 04a718c159 Add autostart option 2017-05-02 10:56:12 +02:00
Jérémy Lecour 9570efcaed Minifirewall: extend configuration abilities with blocks 2017-01-06 15:50:48 +01:00
Jérémy Lecour e815a62112 minifirewall: git clone in /tmp
/usr is often mounted as read-only
2016-12-23 16:24:56 +01:00
Jérémy Lecour c0ab8f99ce Squash: conventions, evolinux, etc-git… 2016-12-21 16:12:30 +01:00