From 0a0dabd37dcf35975bc789b52829707b35b0ca30 Mon Sep 17 00:00:00 2001
From: Robert Kaussow <mail@geeklabor.de>
Date: Wed, 13 Feb 2019 00:22:25 +0100
Subject: [PATCH] allow remote administration by boolean

---
 defaults/main.yml                | 1 +
 templates/etc/cups/cupsd.conf.j2 | 3 +++
 2 files changed, 4 insertions(+)

diff --git a/defaults/main.yml b/defaults/main.yml
index 27e2400..609c142 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -11,6 +11,7 @@ cups_listen_address: print.example.org
 
 cups_log_level: warn
 cups_server_admin: admin@example.com
+cups_remote_admin_enabled: False
 
 cups_iptables_enabled: False
 cups_open_ports:
diff --git a/templates/etc/cups/cupsd.conf.j2 b/templates/etc/cups/cupsd.conf.j2
index 94691fc..1eff84e 100644
--- a/templates/etc/cups/cupsd.conf.j2
+++ b/templates/etc/cups/cupsd.conf.j2
@@ -31,6 +31,9 @@ WebInterface Yes
 
 # Restrict access to the server...
 <Location />
+  {% if cups_remote_admin_enabled %}
+  Allow all
+  {% endif %}
   Order allow,deny
 </Location>