remove iptables integration
All checks were successful
continuous-integration/drone/push Build is passing
All checks were successful
continuous-integration/drone/push Build is passing
This commit is contained in:
parent
3a35cec863
commit
0d96724c94
@ -58,10 +58,3 @@ droneci_gitea_skip_verify: False
|
|||||||
|
|
||||||
# @var droneci_no_proxy: $ ["drone-server", "drone-agent"]
|
# @var droneci_no_proxy: $ ["drone-server", "drone-agent"]
|
||||||
droneci_no_proxy: []
|
droneci_no_proxy: []
|
||||||
|
|
||||||
droneci_iptables_enabled: False
|
|
||||||
droneci_open_ports:
|
|
||||||
- name: allow_droneci_web
|
|
||||||
rules: |
|
|
||||||
-A INPUT -m state --state NEW -p tcp --dport {{ droneci_server_exposed_port }} -j ACCEPT
|
|
||||||
state: present
|
|
||||||
|
@ -26,17 +26,5 @@
|
|||||||
dest: "{{ droneci_service_directory }}/{{ droneci_license_key | basename }}"
|
dest: "{{ droneci_service_directory }}/{{ droneci_license_key | basename }}"
|
||||||
mode: 0600
|
mode: 0600
|
||||||
when: droneci_license_key is defined
|
when: droneci_license_key is defined
|
||||||
|
|
||||||
- name: Open ports in iptables
|
|
||||||
iptables_raw:
|
|
||||||
name: "{{ item.name }}"
|
|
||||||
rules: "{{ item.rules }}"
|
|
||||||
state: "{{ item.state | default('present') }}"
|
|
||||||
weight: "{{ item.weight | default(omit) }}"
|
|
||||||
table: "{{ item.table | default(omit) }}"
|
|
||||||
loop: "{{ droneci_open_ports }}"
|
|
||||||
loop_control:
|
|
||||||
label: "{{ item.name }}"
|
|
||||||
when: droneci_iptables_enabled | bool
|
|
||||||
become: True
|
become: True
|
||||||
become_user: root
|
become_user: root
|
||||||
|
Loading…
Reference in New Issue
Block a user