diff options
author | Christian Pointner <equinox@spreadspace.org> | 2022-01-07 14:42:36 +0100 |
---|---|---|
committer | Christian Pointner <equinox@spreadspace.org> | 2022-01-08 20:54:08 +0100 |
commit | bf327db4ff4e5185f84df50678f488665a3d404e (patch) | |
tree | b3bf68566b238e4422492eecde7f442ce29336c5 /roles/network/nftables/base/tasks/main.yml | |
parent | update zsh config (diff) |
nftables/base: initial commit
Diffstat (limited to 'roles/network/nftables/base/tasks/main.yml')
-rw-r--r-- | roles/network/nftables/base/tasks/main.yml | 26 |
1 files changed, 26 insertions, 0 deletions
diff --git a/roles/network/nftables/base/tasks/main.yml b/roles/network/nftables/base/tasks/main.yml new file mode 100644 index 00000000..46c7d0b5 --- /dev/null +++ b/roles/network/nftables/base/tasks/main.yml @@ -0,0 +1,26 @@ +--- +- name: install nftables + apt: + name: nftables + +- name: create include base directory + file: + path: /etc/nftables.d + state: directory + +- name: generate base nft script + copy: + content: | + #!/usr/sbin/nft -f + + # Ansible managed + flush ruleset + include "/etc/nftables.d/*.nft" + dest: /etc/nftables.conf + notify: reload nftables + +- name: make sure nftables systemd service unit is enabled and started + systemd: + name: nftables.service + state: started + enabled: yes |