Make TCP the default allowed firewall protocol
Custom protocol can still be specified by adding `proto: "proto"` to a loop item.
This commit is contained in:
parent
71cc3e2241
commit
fc7ca37b07
|
@ -3,39 +3,20 @@
|
||||||
community.general.ufw:
|
community.general.ufw:
|
||||||
state: enabled
|
state: enabled
|
||||||
policy: deny
|
policy: deny
|
||||||
|
|
||||||
- name: Allow necessary ports
|
- name: Allow necessary ports
|
||||||
community.general.ufw:
|
community.general.ufw:
|
||||||
rule: allow
|
rule: allow
|
||||||
port: "{{ item.port }}"
|
port: "{{ item.port }}"
|
||||||
proto: "{{ item.proto }}"
|
proto: "{{ item.proto | default('tcp') }}"
|
||||||
loop:
|
loop:
|
||||||
# Gitea SSH
|
- port: 22 # Gitea SSH
|
||||||
- port: 22
|
- port: 80 # HTTP
|
||||||
proto: "tcp"
|
- port: 443 # HTTPS
|
||||||
# HTTP
|
- port: 389 # OpenLDAP
|
||||||
- port: 80
|
- port: 636 # OpenLDAP
|
||||||
proto: "tcp"
|
- port: 25 # Email
|
||||||
# HTTPS
|
- port: 465 # Email
|
||||||
- port: 443
|
- port: 587 # Email
|
||||||
proto: "tcp"
|
- port: 993 # Email
|
||||||
# OpenLDAP
|
- port: 19022 # SSH
|
||||||
- port: 389
|
|
||||||
proto: "tcp"
|
|
||||||
# OpenLDAP
|
|
||||||
- port: 636
|
|
||||||
proto: "tcp"
|
|
||||||
# Email
|
|
||||||
- port: 25
|
|
||||||
proto: "tcp"
|
|
||||||
# Email
|
|
||||||
- port: 465
|
|
||||||
proto: "tcp"
|
|
||||||
# Email
|
|
||||||
- port: 587
|
|
||||||
proto: "tcp"
|
|
||||||
# Email
|
|
||||||
- port: 993
|
|
||||||
proto: "tcp"
|
|
||||||
# SSH
|
|
||||||
- port: 19022
|
|
||||||
proto: "tcp"
|
|
||||||
|
|
Loading…
Reference in a new issue