24 lines
470 B
YAML
24 lines
470 B
YAML
|
---
|
||
|
|
- name: Gate
|
||
|
|
ansible.builtin.meta: end_host
|
||
|
|
when: not firewall_nftables_enabled | bool
|
||
|
|
|
||
|
|
- name: Installer nftables
|
||
|
|
ansible.builtin.apt:
|
||
|
|
name: nftables
|
||
|
|
state: present
|
||
|
|
update_cache: true
|
||
|
|
|
||
|
|
- name: Déployer nftables
|
||
|
|
ansible.builtin.template:
|
||
|
|
src: nftables.conf.j2
|
||
|
|
dest: /etc/nftables.conf
|
||
|
|
mode: '0644'
|
||
|
|
notify: Reload nftables
|
||
|
|
|
||
|
|
- name: Activer nftables
|
||
|
|
ansible.builtin.systemd:
|
||
|
|
name: nftables
|
||
|
|
enabled: true
|
||
|
|
state: started
|