This commit is contained in:
parent
951ba00bf6
commit
89d6acff1c
@ -39,14 +39,6 @@ nginx_gzip_types:
|
|||||||
- text/css
|
- text/css
|
||||||
- application/xml
|
- application/xml
|
||||||
|
|
||||||
nginx_iptables_enabled: False
|
|
||||||
nginx_iptables_rules_default:
|
|
||||||
- name: allow_nginx_ports
|
|
||||||
rules: |
|
|
||||||
-A INPUT -p tcp -m multiport --dports 80,443 -j ACCEPT
|
|
||||||
state: present
|
|
||||||
nginx_iptables_rules_extra: []
|
|
||||||
|
|
||||||
nginx_tls_enabled: False
|
nginx_tls_enabled: False
|
||||||
nginx_tls_versions:
|
nginx_tls_versions:
|
||||||
- TLSv1.2
|
- TLSv1.2
|
||||||
|
@ -76,18 +76,6 @@
|
|||||||
validate: /bin/bash -c 'nginx -t -c /dev/stdin <<< "events {worker_connections 10;} http { include %s; }"'
|
validate: /bin/bash -c 'nginx -t -c /dev/stdin <<< "events {worker_connections 10;} http { include %s; }"'
|
||||||
notify: __nginx_reload
|
notify: __nginx_reload
|
||||||
|
|
||||||
- name: Open ports in iptables
|
|
||||||
iptables_raw:
|
|
||||||
name: "{{ item.name }}"
|
|
||||||
rules: "{{ item.rules }}"
|
|
||||||
state: "{{ item.state | default('present') }}"
|
|
||||||
weight: "{{ item.weight | default(omit) }}"
|
|
||||||
table: "{{ item.table | default(omit) }}"
|
|
||||||
loop: "{{ nginx_iptables_rules_default + nginx_iptables_rules_extra }}"
|
|
||||||
loop_control:
|
|
||||||
label: "{{ item.name }}"
|
|
||||||
when: nginx_iptables_enabled | bool
|
|
||||||
|
|
||||||
- name: Set selinux booleans
|
- name: Set selinux booleans
|
||||||
seboolean:
|
seboolean:
|
||||||
name: "{{ item.name }}"
|
name: "{{ item.name }}"
|
||||||
|
Loading…
Reference in New Issue
Block a user