nginx firewall rules only if nginx not localhost

2019-02-20 22:29:47 +01:00 · 2019-02-20 22:29:47 +01:00 · e25f35f76d
parent a0bdebd347
commit e25f35f76d
1 changed files with 3 additions and 1 deletions
--- a/tasks/nginx.yml
+++ b/tasks/nginx.yml
@ -42,7 +42,9 @@
        name: allow_cups_nginx_proxy
        state: present
        rules: '-A OUTPUT -m state --state NEW -p tcp -d {{ cups_nginx_proxy_url.split(":")[0] }} --dport {{ cups_nginx_proxy_url.split(":")[1] }} -j ACCEPT'
-      when: cups_nginx_iptables_enabled
+      when:
+        - cups_nginx_iptables_enabled
+        - not cups_nginx_server == inventory_hostname
  delegate_to: "{{ cups_nginx_server }}"
  become: True
  become_user: root