jpp/ansible-roles
1
0
Fork 0
mirror of https://git.lapiole.org/dani/ansible-roles.git synced 2025-08-06 16:46:54 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update to 2022-07-21 01:00

Browse Source
This commit is contained in:
Daniel Berteaud
2022-07-21 01:00:17 +02:00
parent eca2f00fb1
commit 0db06a7240
32 changed files with 643 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
roles/nomad/tasks/iptables.yml Normal file
View File

@@ -0,0 +1,15 @@
---
- name: Handle nomad ports in the firewall
iptables_raw:
name: nomad_port_{{ item }}
state: "{{ (('tcp' in nomad_services[item].proto or 'udp' in nomad_services[item].proto) and nomad_services[item].src_ip | length > 0) | ternary('present', 'absent') }}"
rules: |
{% if 'tcp' in nomad_services[item].proto %}
-A INPUT -m state --state NEW -p tcp --dport {{ nomad_services[item].port }} -j ACCEPT
{% endif %}
{% if 'udp' in nomad_services[item].proto %}
-A INPUT -m state --state NEW -p udp --dport {{ nomad_services[item].port }} -j ACCEPT
{% endif %}
loop: "{{ nomad_services.keys() | list }}"
tags: firewall,nomad