feat(roles/security): extendend nftables config

This commit is contained in:
ITQ
2026-03-19 14:48:45 +03:00
parent 14c236650c
commit 1a9715def9
3 changed files with 365 additions and 30 deletions
+3 -11
View File
@@ -6,22 +6,14 @@
update_cache: true
tags: security
- name: Install nftables
ansible.builtin.apt:
name:
- nftables
state: present
update_cache: true
tags: security, nftables
- name: Render nftables configuration
ansible.builtin.template:
src: nftables.conf.j2
dest: /etc/nftables.conf
owner: root
group: root
mode: '0644'
validate: 'nft -c -f %s'
mode: "0644"
validate: "nft -c -f %s"
notify: Reload nftables
tags: security, nftables
@@ -33,6 +25,6 @@
tags: security, nftables
- name: Install and configure fail2ban
include_role:
ansible.builtin.include_role:
name: geerlingguy.security
tags: security