fix: add handler to save changed iptables filter rules

handlers/main.yml

@@ -3,3 +3,23 @@
   systemd:
     name: "postgresql"
     state: restarted
+
+- name: save iptables rules (Debian)
+  block:
+    - name: Ordner für iptables-Config erstellen
+      file:
+        path: "/etc/iptables"
+        state: directory
+        owner: "root"
+        group: "root"
+        mode: 0755
+      listen: "save iptables rules"
+    - name: install netfilter-persistent to be able to save iptables rules
+      apt:
+        name: netfilter-persistent
+        state: present
+      listen: "save iptables rules"
+    - name: save iptables rules
+      command: 'netfilter-persistent save'
+      listen: "save iptables rules"
+  when: ansible_os_family == "Debian"

tasks/configure_iptables_external.yml

@@ -9,3 +9,4 @@
     protocol: "{{ item.protocol | default('tcp') }}"
     source: "{{ item.source }}"
   loop: "{{ vault_iptables_external }}"
+  notify: save iptables rules (Debian)