Nftables

1. Overview
2. Role Variables
   • OS Specific Variables
3. Example Playbook
4. Configuration
5. Development
6. License
7. Author Information

Overview

A role to manage Nftables rules and packages.

Role Variables

• nft_pkg_manage : If nftables package(s) should be managed with this role [default : true].
• nft_pkg_state : State of new nftables package(s) [default : installed].
• nft_main_conf_path : Main configuration file loaded by systemd unit [default : /etc/nftables.conf].
• nft_main_conf_content : Template used to generate the previous main configuration file [default : etc/nftables.conf.j2].
• nft_service_manage : If nftables service should be managed with this role [default : true].
• nft_service_name : nftables service name [default : nftables].

OS Specific Variables

Please see default value by Operating System file in [vars][vars directory] directory.

• nft_pkg_list : The list of package(s) to provide nftables.

Example Playbook

• Manage Nftables with defaults vars :

- hosts: serverXYZ
  roles:
    - role: ipr-cnrs.nftables

Configuration

This role will :

• Install nftables on the system.
• Generate a default configuration file loaded by systemd unit.
• Restart nftables service.

Development

This source code comes from our Gogs instance and the Github repo exist just to be able to send the role to Ansible Galaxy…

But feel free to send issue/PR here :)

Thanks to this hook, Github automatically got updates from our Gogs instance :)

License

WTFPL

Author Information

Jérémy Gardais

• Source : on IPR's Gogs
• IPR (Institut de Physique de Rennes)