Unverified Commit eff43e57 authored by Dmitriy Safronov's avatar Dmitriy Safronov Committed by GitHub
Browse files

essential (#4) 



Signed-off-by: default avatarDmitriy Safronov <zimniy@cyberbrain.pw>
parent 35ba70ba

tasks/main.yml

+1 −1
Original line number Diff line number Diff line
@@ -11,7 +11,7 @@ 
- name: Create override file for firewalld systemd service

  ansible.builtin.template:

    src: firewalld.override.j2

    dest: "/etc/systemd/system/firewalld.service.d/localhost_ssh.conf"

    dest: "/etc/systemd/system/firewalld.service.d/essential.conf"

    mode: '0644'

    owner: root

    group: root

templates/firewalld.override.j2

+3 −0
Original line number Diff line number Diff line 
{{ ansible_managed | comment }}



[Service]

Restart=on-failure

RestartSec=10s



ExecStartPost=-/usr/bin/firewall-cmd --permanent --zone=trusted --add-interface=lo



{% if ansible_port is defined and ansible_port | int > 0 and ansible_port | int != 22 %}