alliance-boreale/infrastructure/ansible/roles/firewall_nftables/defaults/main.yml
2026-03-09 22:20:08 -04:00

9 lines
302 B
YAML

---
firewall_nftables_enabled: true
firewall_nftables_allow_ipv6: true
firewall_nftables_allow_icmp: true
firewall_nftables_policy_input: drop
firewall_nftables_policy_forward: drop
firewall_nftables_policy_output: accept
firewall_nftables_allowed_tcp_in: [22,443]
firewall_nftables_allowed_udp_in: []