Another playbook example
It was hard for me to learn how to use the role and override the default rules. Therefore I want to contribute another example
This commit is contained in:
parent
1fe24f01e4
commit
1f91776374
18
README.md
18
README.md
|
@ -252,6 +252,24 @@ table inet filter {
|
|||
- role: ipr-cnrs.nftables
|
||||
```
|
||||
|
||||
* Override some of the default defined sets:
|
||||
|
||||
``` yml
|
||||
- hosts: serverXYZ
|
||||
vars:
|
||||
- nft_define:
|
||||
input tcp accepted:
|
||||
desc: Custom SSH port and torrent
|
||||
name: in_tcp_accept
|
||||
value: '{ 2201, 6881 }'
|
||||
input udp accepted:
|
||||
desc: torrent
|
||||
name: in_udp_accept
|
||||
value: '{ 6881 }'
|
||||
roles:
|
||||
- role: ipr-cnrs.nftables
|
||||
```
|
||||
|
||||
* Use default rules with allow incoming ICMP and count dropped input packets :
|
||||
|
||||
`group_vars/first_group` :
|
||||
|
|
Loading…
Reference in New Issue