remove iptables integration
All checks were successful
continuous-integration/drone/push Build is passing
All checks were successful
continuous-integration/drone/push Build is passing
This commit is contained in:
parent
5c706acea2
commit
6f15e98158
@ -4,17 +4,6 @@ ldap_proxy_urls:
|
|||||||
- "ldapi:/// ldap:///"
|
- "ldapi:/// ldap:///"
|
||||||
ldap_proxy_options: []
|
ldap_proxy_options: []
|
||||||
|
|
||||||
ldap_proxy_iptables_enabled: False
|
|
||||||
ldap_proxy_open_ports:
|
|
||||||
- name: allow_ldap_out
|
|
||||||
rules: |
|
|
||||||
-A OUTPUT -m state --state NEW -p tcp --dport 389 -j ACCEPT
|
|
||||||
state: present
|
|
||||||
- name: allow_ldap_in
|
|
||||||
rules: |
|
|
||||||
-A INPUT -m state --state NEW -p tcp --dport 389 -j ACCEPT
|
|
||||||
state: present
|
|
||||||
|
|
||||||
ldap_proxy_tls_enabled: False
|
ldap_proxy_tls_enabled: False
|
||||||
ldap_proxy_tls_cert_source: mycert.pem
|
ldap_proxy_tls_cert_source: mycert.pem
|
||||||
ldap_proxy_tls_key_source: mykey.pem
|
ldap_proxy_tls_key_source: mykey.pem
|
||||||
|
@ -54,17 +54,5 @@
|
|||||||
mode: 0644
|
mode: 0644
|
||||||
loop: "{{ ldap_proxy_custom_schemas }}"
|
loop: "{{ ldap_proxy_custom_schemas }}"
|
||||||
notify: __slapd_restart
|
notify: __slapd_restart
|
||||||
|
|
||||||
- name: Open ports in iptables
|
|
||||||
iptables_raw:
|
|
||||||
name: "{{ item.name }}"
|
|
||||||
rules: "{{ item.rules }}"
|
|
||||||
state: "{{ item.state }}"
|
|
||||||
weight: "{{ item.weight | default(omit) }}"
|
|
||||||
table: "{{ item.table | default(omit) }}"
|
|
||||||
loop: "{{ ldap_proxy_open_ports }}"
|
|
||||||
loop_control:
|
|
||||||
label: "{{ item.name }}"
|
|
||||||
when: ldap_proxy_iptables_enabled
|
|
||||||
become: True
|
become: True
|
||||||
become_user: root
|
become_user: root
|
||||||
|
Loading…
Reference in New Issue
Block a user