diff --git a/README.md b/README.md index 6d1c555..7adbd1f 100644 --- a/README.md +++ b/README.md @@ -19,6 +19,8 @@ A role to manage Nftables rules and packages. * **nft_pkg_state** : State of new `nftables` package(s) [default : `installed`]. * **nft_main_conf_path** : Main configuration file loaded by systemd unit [default : `/etc/nftables.conf`]. * **nft_main_conf_content** : Template used to generate the previous main configuration file [default : `etc/nftables.conf.j2`]. +* **nft_service_manage** : If `nftables` service should be managed with this role [default : `true`]. +* **nft_service_name** : `nftables` service name [default : `nftables`]. ### OS Specific Variables @@ -41,6 +43,7 @@ Please see default value by Operating System file in [vars][vars directory] dire This role will : * Install `nftables` on the system. * Generate a default configuration file loaded by systemd unit. +* Restart `nftables` service. ## Development diff --git a/defaults/main.yml b/defaults/main.yml index ccdbd07..985ac3a 100644 --- a/defaults/main.yml +++ b/defaults/main.yml @@ -8,3 +8,7 @@ nft_pkg_state: 'installed' # conf nft_main_conf_path: '/etc/nftables.conf' nft_main_conf_content: 'etc/nftables.conf.j2' + +# service +nft_service_manage: true +nft_service_name: 'nftables' diff --git a/handlers/main.yml b/handlers/main.yml new file mode 100644 index 0000000..139c24b --- /dev/null +++ b/handlers/main.yml @@ -0,0 +1,5 @@ +--- +# handlers file for nftables +- name: restart nftables service + service: name={{ nft_service_name }} state=restarted + when: nft_service_manage diff --git a/tasks/main.yml b/tasks/main.yml index bf9b302..6ddd1de 100644 --- a/tasks/main.yml +++ b/tasks/main.yml @@ -28,5 +28,5 @@ group: root mode: 0755 backup: yes - + notify: restart nftables service # }}} diff --git a/tests/inventory b/tests/inventory new file mode 100644 index 0000000..d18580b --- /dev/null +++ b/tests/inventory @@ -0,0 +1 @@ +localhost \ No newline at end of file diff --git a/tests/test.yml b/tests/test.yml new file mode 100644 index 0000000..6cc758e --- /dev/null +++ b/tests/test.yml @@ -0,0 +1,5 @@ +--- +- hosts: localhost + remote_user: root + roles: + - nftables \ No newline at end of file