From 58dbf9ff229c6c854d50e68178f88d547df5ef90 Mon Sep 17 00:00:00 2001
From: Sam Al-Sapti <sam@sapti.me>
Date: Tue, 15 Nov 2022 20:42:18 +0100
Subject: [PATCH] Allow only TCP traffic on specified ports

---
 roles/ubuntu_base/tasks/firewall.yml | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/roles/ubuntu_base/tasks/firewall.yml b/roles/ubuntu_base/tasks/firewall.yml
index bd40c93d..f4318653 100644
--- a/roles/ubuntu_base/tasks/firewall.yml
+++ b/roles/ubuntu_base/tasks/firewall.yml
@@ -8,13 +8,13 @@
     rule: allow
     port: "{{ item }}"
   loop:
-    - 22     # Gitea SSH
-    - 80     # HTTP
-    - 443    # HTTPS
-    - 389    # OpenLDAP
-    - 636    # OpenLDAP
-    - 25     # Email
-    - 465    # Email
-    - 587    # Email
-    - 993    # Email
-    - 19022  # SSH
+    - "22/tcp"     # Gitea SSH
+    - "80/tcp"     # HTTP
+    - "443/tcp"    # HTTPS
+    - "389/tcp"    # OpenLDAP
+    - "636/tcp"    # OpenLDAP
+    - "25/tcp"     # Email
+    - "465/tcp"    # Email
+    - "587/tcp"    # Email
+    - "993/tcp"    # Email
+    - "19022/tcp"  # SSH