diff --git a/defaults/main.yml b/defaults/main.yml index bf293ec..0946b1c 100644 --- a/defaults/main.yml +++ b/defaults/main.yml @@ -15,7 +15,9 @@ iptables_default_tail: | -A FORWARD -j REJECT iptables_custom_rules: [] -iptables_custom_rules_extra: [] + +iptables_app_rules: [] +iptables_app_rules_extra: [] # @var iptables_keep_unmanaged:description: > # By default this role deletes all iptables rules which are not managed by Ansible. diff --git a/tasks/config.yml b/tasks/config.yml index d950147..f411e4c 100644 --- a/tasks/config.yml +++ b/tasks/config.yml @@ -12,6 +12,17 @@ loop_control: label: "{{ item.name }}" + - name: Set applications iptables rules + iptables_raw: + name: '{{ item.name }}' + rules: '{{ item.rules }}' + state: '{{ item.state }}' + weight: '{{ item.weight | default(omit) }}' + table: '{{ item.table | default(omit) }}' + loop: '{{ iptables_app_rules + iptables_app_rules_extra }}' + loop_control: + label: "{{ item.name }}" + - name: Set default iptables head rules iptables_raw: name: iptables_default_head