I was hoping someone here could help with this as well. Unfortunately I’m not very well versed on iptables. Any thoughts on this?Īs for creating the rules I saw there’s a built-in iptables module that I could use instead. This is not really the case for me, but I’d like to be able to run this playbook from different machines and installing modules might make things more difficult. It seems there’s a community module for ufw but I’m not really sure how to install it and whether or not is good practice to use additional modules when writing playbooks that are meant to be shared with others. I have a question in case someone knows how to handle this, it’s regarding managing ufw to setup some rules to allow ports for ssh, http and https. Hi, I posted in the topic for the next episode as well as I’m just going through this series.

name: change e-mail address for admin tags: apache,centos,httpd lineinfile: path: /etc/httpd/conf/nf regexp: '^ServerAdmin' line: ServerAdmin when: ansible_distribution = 'CentOS' register: httpd - name: restart httpd (CentOS) tags: apache,centos,httpd service: name: httpd state: restarted when: httpd.changed State: latest site.yml (added ‘lineinfile’ play). State: latest site.yml (second version, the change is in bold). name: install mariadb server package (CentOS) name: start and enable httpd (CentOS) tags: apache,centos,httpd service: name: httpd state: started when: ansible_distribution = 'CentOS' That was it.Site.yml (text in bold has been added since the previous version). One of the others parameters of the apt module is : update_cache: yes With the task above, we can be sure that the iptables-persistent package, will be installed. You can check the Ansible documentation on what other choices you have with the parameter: state. We can do that, pretty simple with an Ansible playbook: - name: Install IPtables-persistent In order for the saved rules to be loaded automatically on boot we need: iptables-persistent package to be installed. (Check my post on how to do that: “How we manage IPtables – now and then”.) You can save changes made of the iptables rules either directly from the command line or with a playbook. Well, this will be a really quick and straight-forward post about Ansible.

Ansible iptables