Manage nftables service at startup.

This commit is contained in:
Jeremy Gardais 2017-08-09 14:27:07 +02:00
parent 6b474cc119
commit f5f4b83a84
4 changed files with 18 additions and 1 deletions

View File

@ -1,4 +1,9 @@
## v1.x
### Features
* Manage nftables service at startup.
## v1.0
### Features

View File

@ -44,6 +44,7 @@ Highly inspired by [Mike Gleason firewall role][mikegleasonjr firewall github] (
* **nft_define_host**: You can add or override existant vars.
* **nft_service_manage**: If `nftables` service should be managed with this role [default: `true`].
* **nft_service_name**: `nftables` service name [default: `nftables`].
* **nft_service_enabled**: Set `nftables` service available at startup [default: `true`].
### OS Specific Variables
@ -202,6 +203,7 @@ nft_input_group_rules:
This role will:
* Install `nftables` on the system.
* Enable `nftables` service by default at startup.
* Generate a default configuration file which include all following files and loaded by systemd unit.
* Generate input and output rules files include called by the main configuration file.
* Generate vars in a file and sets and maps in another file.

View File

@ -5,7 +5,7 @@
nft_pkg_manage: true
nft_pkg_state: 'installed'
# conf
# files
nft_main_conf_path: '/etc/nftables.conf'
nft_main_conf_content: 'etc/nftables.conf.j2'
nft_input_conf_path: '/etc/nftables.d/filter-input.nft'
@ -74,3 +74,4 @@ nft_set_host: {}
# service
nft_service_manage: true
nft_service_name: 'nftables'
nft_service_enabled: true

View File

@ -70,3 +70,12 @@
backup: yes
notify: restart nftables service
# }}}
# service {{{
- name: SERVICE manage '{{ nft_service_name }}'
service:
name: '{{ nft_service_name }}'
state: started
enabled: '{{ nft_service_enabled }}'
when: nft_service_manage
# }}}