zlopez/ansible
1
0
Fork 0
forked from infra/ansible
Code Pull requests Activity
ansible/roles/base
History
Exact
Jiri Kyjovsky 99f1ff2202 base: disable iptables service when nftables is enabled 
When `nftables=True` the base role deploys nftables rules and enables the
nftables service, but never disables the iptables service. On freshly
provisioned hosts the iptables service can be left running from cloud-init,
overwriting nftables rules and silently dropping traffic on ports defined
in `tcp_ports`.

Stop and disable the iptables service explicitly when nftables is the
intended firewall backend.
2026-07-07 22:02:24 +00:00
..
files [postfix] Change the relayhost for sign machines 2026-07-07 11:01:08 +02:00
handlers [postfix] Move lmdb handler to separate file 2026-03-11 14:48:09 +01:00
meta Fix majority of remaining yamllint warnings and errors 2024-11-28 17:31:45 +10:00
tasks base: disable iptables service when nftables is enabled 2026-07-07 22:02:24 +00:00
templates Nagios: remove nrpe from the firewall config 2026-07-01 13:35:34 +01:00
README Move base to a role. 2013-08-25 18:44:54 +00:00

README 

This role is the base setup for all our machines. 

If there's something that shouldn't be run on every single 
machine, it should be in another role.