remove iptables integration
All checks were successful
continuous-integration/drone/push Build is passing
All checks were successful
continuous-integration/drone/push Build is passing
This commit is contained in:
parent
5c706acea2
commit
6f15e98158
@ -4,17 +4,6 @@ ldap_proxy_urls:
|
||||
- "ldapi:/// ldap:///"
|
||||
ldap_proxy_options: []
|
||||
|
||||
ldap_proxy_iptables_enabled: False
|
||||
ldap_proxy_open_ports:
|
||||
- name: allow_ldap_out
|
||||
rules: |
|
||||
-A OUTPUT -m state --state NEW -p tcp --dport 389 -j ACCEPT
|
||||
state: present
|
||||
- name: allow_ldap_in
|
||||
rules: |
|
||||
-A INPUT -m state --state NEW -p tcp --dport 389 -j ACCEPT
|
||||
state: present
|
||||
|
||||
ldap_proxy_tls_enabled: False
|
||||
ldap_proxy_tls_cert_source: mycert.pem
|
||||
ldap_proxy_tls_key_source: mykey.pem
|
||||
|
@ -54,17 +54,5 @@
|
||||
mode: 0644
|
||||
loop: "{{ ldap_proxy_custom_schemas }}"
|
||||
notify: __slapd_restart
|
||||
|
||||
- name: Open ports in iptables
|
||||
iptables_raw:
|
||||
name: "{{ item.name }}"
|
||||
rules: "{{ item.rules }}"
|
||||
state: "{{ item.state }}"
|
||||
weight: "{{ item.weight | default(omit) }}"
|
||||
table: "{{ item.table | default(omit) }}"
|
||||
loop: "{{ ldap_proxy_open_ports }}"
|
||||
loop_control:
|
||||
label: "{{ item.name }}"
|
||||
when: ldap_proxy_iptables_enabled
|
||||
become: True
|
||||
become_user: root
|
||||
|
Loading…
Reference in New Issue
Block a user