robinreinhardt/ansible-role-firewalld

Configure services and ports in firewalld.

Firewalld

Configure services and ports in firewalld.

Requirements

Firewalld installed on target machine.

Role Variables

Available variables are listed below, along with default values (see defaults/main.yml):

firewalld_enabled: True

By default, the firewalld configuration is enabled, so skip set to False.

firewalld_reload: True

Trigger a reload of the firewalld service, after configuring the specified configuration options.

__firewalld_services:
  ssh:
    permanant: true
    state: enabled

By default, ensure the ssh service is enabled.

firewalld_services: {}

Additional services to enable, these are merged with __firewalld_services. For a list of available services, run the firewall-cmd --get-service command on the provisioned server.

firewalld_ports: {}

Ports and protocols to configure.

Dependencies

None.

Example Playbook

- hosts: servers
  become: yes
  vars_files:
    - vars/main.yml
  roles:
    - memiah.firewalld

Inside vars/main.yml:

firewalld_services:
  http:
    zone: public
    state: enabled
    permanant: true
  https:
    state: enabled
    
firewalld_ports:
    mysql:
      port: 3306
      protocol: tcp
      state: enabled
      zone: public
      permanent: true

License

MIT / BSD

Author Information

This role was created in 2016 by Memiah Limited.