dont create iptables rule on nginx server if nginx is localhost or self
All checks were successful
continuous-integration/drone/push Build is passing
All checks were successful
continuous-integration/drone/push Build is passing
This commit is contained in:
parent
22c5c35bd6
commit
5a23ff6a13
@ -42,7 +42,7 @@
|
|||||||
name: allow_matrix_nginx_proxy
|
name: allow_matrix_nginx_proxy
|
||||||
state: present
|
state: present
|
||||||
rules: '-A OUTPUT -m state --state NEW -p tcp -d {{ matrix_nginx_proxy_ip }} --dport {{ matrix_nginx_proxy_port }} -j ACCEPT'
|
rules: '-A OUTPUT -m state --state NEW -p tcp -d {{ matrix_nginx_proxy_ip }} --dport {{ matrix_nginx_proxy_port }} -j ACCEPT'
|
||||||
when: matrix_nginx_iptables_enabled
|
when: matrix_nginx_iptables_enabled and (not matrix_nginx_server == inventory_hostname or not matrix_nginx_server == "localhost")
|
||||||
delegate_to: "{{ matrix_nginx_server }}"
|
delegate_to: "{{ matrix_nginx_server }}"
|
||||||
become: True
|
become: True
|
||||||
become_user: root
|
become_user: root
|
||||||
|
Loading…
Reference in New Issue
Block a user