~xenrox/ansible

42c4cea760a6974ae9fff189720c624bc1213da1 — Thorben Günther 1 year, 9 months ago 39579f7
firewalld: Support setting a backend
3 files changed, 5 insertions(+), 3 deletions(-)

A roles/firewalld/defaults/main.yml
M roles/firewalld/tasks/main.yml
R roles/firewalld/{files/firewalld.conf => templates/firewalld.conf.j2}
A roles/firewalld/defaults/main.yml => roles/firewalld/defaults/main.yml +2 -0
@@ 0,0 1,2 @@
---
firewalld_backend: nftables

M roles/firewalld/tasks/main.yml => roles/firewalld/tasks/main.yml +2 -2
@@ 5,8 5,8 @@
    state: present

- name: configure firewalld
  ansible.builtin.copy:
    src: firewalld.conf
  ansible.builtin.template:
    src: firewalld.conf.j2
    dest: /etc/firewalld/firewalld.conf
    owner: root
    group: root

R roles/firewalld/files/firewalld.conf => roles/firewalld/templates/firewalld.conf.j2 +1 -1
@@ 56,7 56,7 @@ LogDenied=off
#	- iptables (iptables, ip6tables, ebtables and ipset)
# Note: The iptables backend is deprecated. It will be removed in a future
# release.
FirewallBackend=nftables
FirewallBackend={{ firewalld_backend }}

# FlushAllOnReload
# Flush all runtime rules on a reload. In previous releases some runtime