From 6c2f1b50a7ae27713572637d3552cb0f7ece400c Mon Sep 17 00:00:00 2001
From: Robert Kaussow <mail@geeklabor.de>
Date: Wed, 11 Jul 2018 23:08:25 +0200
Subject: [PATCH] try to fix firewall rules

---
 defaults/main.yml | 3 +++
 tasks/install.yml | 9 +++++++++
 2 files changed, 12 insertions(+)

diff --git a/defaults/main.yml b/defaults/main.yml
index c667e0a..d7d073b 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -1,6 +1,7 @@
 ---
 unifi_version: 5.6.39
 unifi_openjdk_version: 1.8.0
+unifi_restore_after_upgrade: False
 
 unifi_group: ubnt
 unifi_user: ubnt
@@ -23,5 +24,7 @@ unifi_open_ports:
   # - { flag: "allow_unifi", proto: "tcp", port: "8880" }
   # - { flag: "allow_unifi", proto: "tcp", port: "8843" }
   - { flag: "allow_unifi_speedtest", direction: "output", proto: "tcp", port: "6789" }
+  - { flag: "allow_unifi_stun", direction: "input", proto: "udp", port: "3478" }
   - { flag: "allow_unifi_stun", direction: "output", proto: "udp", port: "3478" }
+  - { flag: "allow_unifi_discover", direction: "input", proto: "udp", port: "10001" }
   - { flag: "allow_unifi_discover", direction: "output", proto: "udp", port: "10001" }
diff --git a/tasks/install.yml b/tasks/install.yml
index 7060419..15b056a 100644
--- a/tasks/install.yml
+++ b/tasks/install.yml
@@ -33,6 +33,15 @@
   become_user: "{{ unifi_user }}"
   when:  unifi_current_version is version_compare(unifi_version, ">") or unifi_current_version is version_compare('0.0.0', "=")
 
+- block:
+
+
+  become: True
+  become_user: "{{ unifi_user }}"
+  when:
+    - unifi_current_version is version_compare(unifi_version, ">") or unifi_current_version is version_compare('0.0.0', "=")
+    - unifi_restore_after_upgrade
+
 - name: Create symlink for latest version
   file:
     src: "{{ unifi_base_dir }}/{{ unifi_version }}"