23 lines
470 B
YAML
23 lines
470 B
YAML
---
|
|
- name: Gate
|
|
ansible.builtin.meta: end_host
|
|
when: not firewall_nftables_enabled | bool
|
|
|
|
- name: Installer nftables
|
|
ansible.builtin.apt:
|
|
name: nftables
|
|
state: present
|
|
update_cache: true
|
|
|
|
- name: Déployer nftables
|
|
ansible.builtin.template:
|
|
src: nftables.conf.j2
|
|
dest: /etc/nftables.conf
|
|
mode: '0644'
|
|
notify: Reload nftables
|
|
|
|
- name: Activer nftables
|
|
ansible.builtin.systemd:
|
|
name: nftables
|
|
enabled: true
|
|
state: started
|