update

2026-02-08 00:46:24 +01:00 · 2024-12-05 23:28:18 +01:00
parent 343d7066aa
commit dce2196c32
10 changed files with 334 additions and 7 deletions
--- a/playbooks/roles/base_system/tasks/firewall.yml
+++ b/playbooks/roles/base_system/tasks/firewall.yml
@@ -0,0 +1,20 @@
+- name: Install firewall
+  tags:
+    - install
+  ansible.builtin.package:
+    name:
+      - ufw
+
+- name: UFW - Allow SSH connections
+  tags:
+    - config
+  community.general.ufw:
+    rule: allow
+    name: OpenSSH
+
+- name: UFW - Enable and deny by default
+  tags:
+    - config
+  community.general.ufw:
+    state: enabled
+    default: deny