From 0f9684ecee0bdabf24d2dcff8fd2cc36b7f67eb6 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?J=C3=B6rg=20Sachse?= <Joerg.Sachse@slub-dresden.de> Date: Mon, 21 Feb 2022 10:26:45 +0100 Subject: [PATCH] fix: add handler to save changed iptables filter rules --- handlers/main.yml | 20 ++++++++++++++++++++ tasks/configure_iptables_external.yml | 1 + 2 files changed, 21 insertions(+) diff --git a/handlers/main.yml b/handlers/main.yml index 96b818b..26f5fa9 100644 --- a/handlers/main.yml +++ b/handlers/main.yml @@ -3,3 +3,23 @@ systemd: name: "postgresql" state: restarted + +- name: save iptables rules (Debian) + block: + - name: Ordner für iptables-Config erstellen + file: + path: "/etc/iptables" + state: directory + owner: "root" + group: "root" + mode: 0755 + listen: "save iptables rules" + - name: install netfilter-persistent to be able to save iptables rules + apt: + name: netfilter-persistent + state: present + listen: "save iptables rules" + - name: save iptables rules + command: 'netfilter-persistent save' + listen: "save iptables rules" + when: ansible_os_family == "Debian" diff --git a/tasks/configure_iptables_external.yml b/tasks/configure_iptables_external.yml index e18f847..f0326fa 100644 --- a/tasks/configure_iptables_external.yml +++ b/tasks/configure_iptables_external.yml @@ -9,3 +9,4 @@ protocol: "{{ item.protocol | default('tcp') }}" source: "{{ item.source }}" loop: "{{ vault_iptables_external }}" + notify: save iptables rules (Debian) -- GitLab