diff --git a/defaults/main.yml b/defaults/main.yml index 753f0e0..3275fbe 100644 --- a/defaults/main.yml +++ b/defaults/main.yml @@ -19,17 +19,11 @@ unifi_tmp_dir: "{{ unifi_base_dir }}/tmp" unifi_iptables_enabled: True unifi_open_ports: - { flag: "allow_unifi_web", direction: "input", proto: "tcp", port: "8443" } - - { flag: "allow_unifi", direction: "input", proto: "tcp", port: "8080" } - - { flag: "allow_unifi", direction: "output", proto: "tcp", port: "8080" } - - { flag: "allow_unifi", direction: "input", proto: "tcp", port: "8880" } - - { flag: "allow_unifi", direction: "output", proto: "tcp", port: "8880" } - - { flag: "allow_unifi", direction: "input", proto: "tcp", port: "8843" } - - { flag: "allow_unifi", direction: "output", proto: "tcp", port: "8843" } + - { flag: "allow_unifi_comm_in", direction: "input", proto: "tcp", port: "8080" } + - { flag: "allow_unifi_comm_out", direction: "output", proto: "tcp", port: "8080" } - { flag: "allow_unifi_speedtest", direction: "output", proto: "tcp", port: "6789" } - - { flag: "allow_unifi_stun", direction: "input", proto: "udp", port: "3478" } - - { flag: "allow_unifi_stun", direction: "output", proto: "udp", port: "3478" } - - { flag: "allow_unifi_discover", direction: "input", proto: "udp", port: "10001" } - - { flag: "allow_unifi_discover", direction: "output", proto: "udp", port: "10001" } - - { flag: "allow_unifi_broadcast", direction: "input", proto: "udp", port: "5656:5699" } - - { flag: "allow_unifi_broadcast", direction: "output", proto: "udp", port: "5656:5699" } - - { flag: "allow_ssh", direction: "output", proto: "tcp", port: "22" } + - { flag: "allow_unifi_stun_in", direction: "input", proto: "udp", port: "3478" } + - { flag: "allow_unifi_stun_out", direction: "output", proto: "udp", port: "3478" } + - { flag: "allow_unifi_discover_in", direction: "input", proto: "udp", port: "10001" } + - { flag: "allow_unifi_discover_out", direction: "output", proto: "udp", port: "10001" } + - { flag: "allow_ssh_out", direction: "output", proto: "tcp", port: "22" }