tasks/firewall.yml


1
2
3
4
5
6
7
8
9
10
11
12
13

- name: Install nftables
  apt: pkg=nftables

- name: Configure nftables
  copy: src=etc/nftables.conf
        dest=/etc/nftables
        owner=root group=root
        mode=0644
  notify:
    - Restart nftables

- name: Start nftables
  service: name=nftables.service enabled=true state=started