Add firewall setup with UFW

roles/ubuntu_base/tasks/base.yml

@@ -9,6 +9,7 @@
     - apparmor
     - haveged
     - mosh
+    - ufw
     - srvadmin-all # Dell OpenManage
 
 - name: Install necessary packages via pip

roles/ubuntu_base/tasks/firewall.yml

@@ -0,0 +1,20 @@
+---
+- name: Setup firewall with UFW
+  community.general.ufw: 
+    state: enabled
+    policy: deny
+- name: Allow necessary ports
+  community.general.ufw:
+    rule: allow
+    port: "{{ item }}"
+  loop:
+    - 22     # Gitea SSH
+    - 80     # HTTP
+    - 443    # HTTPS
+    - 389    # OpenLDAP
+    - 636    # OpenLDAP
+    - 25     # Email
+    - 465    # Email
+    - 587    # Email
+    - 993    # Email
+    - 19022  # SSH

roles/ubuntu_base/tasks/main.yml

@@ -7,4 +7,6 @@
   tags: [install-base-packages]
 - import_tasks: users.yml
   tags: [setup-users]
+- import_tasks: firewall.yml
+  tags: [setup-firewall]