ansible/xoxys.firewalld
0
0
Fork 0
Code Issues Pull Requests Releases Activity

feat: add option to ignore zones not managed by ansible
All checks were successful
continuous-integration/drone/push Build is passing
Details

Browse Source
This commit is contained in:
Robert Kaussow 2023-02-19 20:59:55 +01:00
parent 1cb48879c4
commit a0b3585f86
Signed by: xoxys
GPG Key ID: 4E692A2EAECC03C0
2 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
defaults/main.yml
View File

@ -108,3 +108,5 @@ firewalld_zones:
- name: dhcpv6-client - name: dhcpv6-client
- name: cockpit - name: cockpit
firewalld_zones_extra: [] firewalld_zones_extra: []
firewalld_zones_unmanaged: []

6
tasks/setup.yml
View File

@ -73,7 +73,7 @@
src: etc/firewalld/zones/zone.xml.j2 src: etc/firewalld/zones/zone.xml.j2
dest: /etc/firewalld/zones/{{ item.name }}.xml dest: /etc/firewalld/zones/{{ item.name }}.xml
mode: 0640 mode: 0640
loop: "{{ __firewalld_zones }}" loop: "{{ __firewalld_zones | difference(firewalld_zones_unmanaged) }}"
loop_control: loop_control:
label: "{{ item.name }}" label: "{{ item.name }}"
notify: __firewalld_reload notify: __firewalld_reload
@ -93,7 +93,9 @@
state: absent state: absent
loop: "{{ __firewalld_zones_active.files | map(attribute='path') | list }}" loop: "{{ __firewalld_zones_active.files | map(attribute='path') | list }}"
notify: __firewalld_reload notify: __firewalld_reload
when: (item | basename | splitext | first) not in (__firewalld_zones | map(attribute='name') | list) when:
- (item | basename | splitext | first) not in (__firewalld_zones | map(attribute='name') | list)
- (item not in firewalld_zones_unmanaged)
- name: Validate deployed configuration - name: Validate deployed configuration
command: firewall-offline-cmd --check-config command: firewall-offline-cmd --check-config