configure_iptables_external.yml

---
- name: configure iptables filter rules for external access
  ansible.builtin.iptables:
    action: "insert"
    chain: "{{ item.chain | default('INPUT') }}"
    comment: "{{ item.comment | default(omit) }}"
    destination_port: "{{ item.destination_port }}"
    jump: "{{ item.jump | default('DROP') }}"
    protocol: "{{ item.protocol | default('tcp') }}"
    source: "{{ item.source }}"
  loop: "{{ vault_iptables_external }}"