pez-infra/ansible/roles/firewall_alpine/handlers/main.yml at b59d9edc8f3caa722203359f1f99434e9db4acff - RWejlgaard/pez-infra - Forgejo

RWejlgaard/pez-infra

mirror of https://github.com/RWejlgaard/pez-infra.git synced 2026-05-06 04:14:43 +00:00

Rasmus Wejlgaard b59d9edc8f capture nuremberg-a firewall rules in pez-infra

Add firewall_alpine role for Alpine hosts with iptables persistence
and fail2ban SSH jails. Wire it into nuremberg-a's deploy stage.

Mail ports are already exposed via Docker port mappings in the
poste-io docker-compose — this captures the surrounding iptables
and fail2ban config that was previously undocumented.

Closes PESO-96

2026-03-29 13:38:55 +00:00

9 lines

214 B

YAML

Raw Blame History

 ---
 - name: Restore iptables
   ansible.builtin.command: iptables-restore < /etc/iptables/rules-save
   changed_when: true
 - name: Restart fail2ban
   ansible.builtin.service:
     name: fail2ban
     state: restarted