Patrick Marchand
de4ba88790
blocks allow us to assign multiple tags to multiple tasks without repeating ourselves. This also simplifies other logic like conditional includes.
25 lines
741 B
YAML
25 lines
741 B
YAML
---
|
|
|
|
- block:
|
|
- name: Is there a Minifirewall ?
|
|
stat:
|
|
path: /etc/default/minifirewall
|
|
register: evobackup_client__minifirewall
|
|
|
|
- include: "jail_port.yml"
|
|
when: evobackup_client__minifirewall.stat.exists
|
|
|
|
- name: Add backup SSH port in /etc/default/minifirewall
|
|
blockinfile:
|
|
dest: /etc/default/minifirewall
|
|
marker: "# {mark} {{ item.name }}"
|
|
block: |
|
|
/sbin/iptables -A INPUT -p tcp --sport {{ item.port }} --dport 1024:65535 -s {{ item.ip }} -m state --state ESTABLISHED,RELATED -j ACCEPT
|
|
with_items: "{{ evobackup_client__hosts }}"
|
|
notify: restart minifirewall
|
|
when: evobackup_client__minifirewall.stat.exists
|
|
|
|
tags:
|
|
- evobackup_client
|
|
- evobackup_client_firewall
|