Configuring your UFW firewall
This is example for group vars:
---
# defaults file for ufw
reset_old_rules: false
allow_networks:
- net: "127.0.0.1/8"
description: "loop"
- net: 10.0.0.0/8
description: "Private network"
- net: 172.16.0.0/12
description: "Private network"
- net: 192.168.0.0/16
description: "Private network"
- net: "1.1.1.1"
description: "Monitoring "
# Allow all firewall access from group hosts on everyone's nodes
allow_group_hosts: "{{ groups[group_names | last] | map('extract', hostvars, 'ansible_host') | list }}" #inventory_hostname
public_ports:
- port: 22
protocol: tcp
description: "SSH"
- port: 80
protocol: tcp
description: "HTTP"
- port: 443
protocol: tcp
description: "HTTPS" - hosts: servers
roles:
- { role: ansible-role-ufw }BSD
An optional section for the role authors to include contact information, or a website (HTML is not allowed).