jpp/ansible-roles
1
0
Fork 0
mirror of https://git.lapiole.org/dani/ansible-roles.git synced 2025-08-04 07:37:20 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update to 2022-03-04 18:00

Browse Source
This commit is contained in:
Daniel Berteaud
2022-03-04 18:00:06 +01:00
parent f8eb615f1a
commit 6918bfc1ce
17 changed files with 190 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
roles/sftpgo/tasks/iptables.yml
View File

@@ -3,19 +3,22 @@
- name: Handle sftpgo ports in the firewall
iptables_raw:
name: "{{ item.name }}"
state: "{{ (item.src_ip | length > 0) | ternary('present','absent') }}"
state: "{{ (item.src_ip | length > 0 and (item.port is not string or item.port != '0')) | ternary('present','absent') }}"
rules: "-A INPUT -m state --state NEW -p tcp {{ item.port is string | ternary('--dport ' ~ item.port, '-m multiport --dports ' ~ item.port | join(',')) }} -s {{ item.src_ip | join(',') }} -j ACCEPT"
with_items:
- port: "{{ sftpgo_conf.sftpd.bindings.port }}"
name: sftpgo_sftp_port
src_ip: "{{ sftpgo_sftp_src_ip }}"
src_ip: "{{ sftpgo_sftpd_src_ip }}"
- port: "{{ [sftpgo_conf.ftpd.bindings.port,sftpgo_conf.ftpd.passive_port_range.start ~ ':' ~ sftpgo_conf.ftpd.passive_port_range.end] }}"
name: sftpgo_ftp_port
src_ip: "{{ sftpgo_ftp_src_ip }}"
src_ip: "{{ sftpgo_ftpd_src_ip }}"
- port: "{{ sftpgo_conf.webdavd.bindings.port }}"
name: sftpgo_webdav_port
src_ip: "{{ sftpgo_webdav_src_ip }}"
src_ip: "{{ sftpgo_webdavd_src_ip }}"
- port: "{{ sftpgo_conf.httpd.bindings.port }}"
name: sftpgo_http_port
src_ip: "{{ sftpgo_http_src_ip }}"
src_ip: "{{ sftpgo_httpd_src_ip }}"
- port: "{{ sftpgo_conf.telemetry.bind_port }}"
name: sftpgo_metrics_port
src_ip: "{{ sftpgo_telemetry_src_ip }}"
tags: firewall,sftpgo