chris
9798ca9cd6
- Created handlers for reloading systemd and restarting firewall services. - Implemented tasks to ensure the existence of configuration directories and files. - Deployed host-specific and shared configuration files using templates. - Added scripts for managing IPv4 and IPv6 firewalls. - Configured systemd service units for ipt-firewall and ip6t-firewall. - Enabled and started firewall services on system boot.
75 lines
2.4 KiB
Django/Jinja
75 lines
2.4 KiB
Django/Jinja
#!/usr/bin/env bash
|
|
# {{ ansible_managed }}
|
|
|
|
|
|
# -------------
|
|
# --- Network Interfaces
|
|
# -------------
|
|
|
|
# - External interface(s)
|
|
#
|
|
ext_if_1="{{ fw_ext_interfaces[0] if fw_ext_interfaces | length >= 1 else '' }}"
|
|
ext_if_2="{{ fw_ext_interfaces[1] if fw_ext_interfaces | length >= 2 else '' }}"
|
|
ext_if_3="{{ fw_ext_interfaces[2] if fw_ext_interfaces | length >= 3 else '' }}"
|
|
|
|
ext_ifs="{{ fw_ext_interfaces | join(' ') }}"
|
|
|
|
|
|
# - VPN Interfaces
|
|
# - (comma separated list)
|
|
vpn_ifs="{{ fw_vpn_ifs }}"
|
|
|
|
|
|
# - Wireguard Interfaces
|
|
# - (comma separated list)
|
|
wg_ifs="{{ fw_wg_ifs }}"
|
|
|
|
|
|
# - Local Interfaces
|
|
local_if_1="{{ fw_local_interfaces[0] if fw_local_interfaces | length >= 1 else '' }}"
|
|
local_if_2="{{ fw_local_interfaces[1] if fw_local_interfaces | length >= 2 else '' }}"
|
|
local_if_3="{{ fw_local_interfaces[2] if fw_local_interfaces | length >= 3 else '' }}"
|
|
|
|
local_ifs="{{ fw_local_interfaces | join(' ') }}"
|
|
|
|
|
|
# -------------
|
|
# --- IP-Addresses
|
|
# -------------
|
|
|
|
# - Extern IP Addresses on this Host
|
|
#
|
|
ext_1_ip="{{ fw_ext_ips_v4[0] if fw_ext_ips_v4 | length >= 1 else '' }}"
|
|
ext_2_ip="{{ fw_ext_ips_v4[1] if fw_ext_ips_v4 | length >= 2 else '' }}"
|
|
ext_3_ip="{{ fw_ext_ips_v4[2] if fw_ext_ips_v4 | length >= 3 else '' }}"
|
|
|
|
ext_ips="{{ fw_ext_ips_v4 | join(' ') }}"
|
|
|
|
local_1_ip="{{ fw_local_ips_v4[0] if fw_local_ips_v4 | length >= 1 else '' }}"
|
|
local_2_ip="{{ fw_local_ips_v4[1] if fw_local_ips_v4 | length >= 2 else '' }}"
|
|
local_3_ip="{{ fw_local_ips_v4[2] if fw_local_ips_v4 | length >= 3 else '' }}"
|
|
|
|
local_ips="{{ fw_local_ips_v4 | join(' ') }}"
|
|
|
|
|
|
# -------------
|
|
# --- IP-Addresses LXC Guest Systems
|
|
# -------------
|
|
|
|
lxc_guest_1_ip="{{ fw_lxc_guest_ips_v4[0] if fw_lxc_guest_ips_v4 | length >= 1 else '' }}"
|
|
lxc_guest_2_ip="{{ fw_lxc_guest_ips_v4[1] if fw_lxc_guest_ips_v4 | length >= 2 else '' }}"
|
|
lxc_guest_3_ip="{{ fw_lxc_guest_ips_v4[2] if fw_lxc_guest_ips_v4 | length >= 3 else '' }}"
|
|
lxc_guest_4_ip="{{ fw_lxc_guest_ips_v4[3] if fw_lxc_guest_ips_v4 | length >= 4 else '' }}"
|
|
lxc_guest_5_ip="{{ fw_lxc_guest_ips_v4[4] if fw_lxc_guest_ips_v4 | length >= 5 else '' }}"
|
|
lxc_guest_6_ip="{{ fw_lxc_guest_ips_v4[5] if fw_lxc_guest_ips_v4 | length >= 6 else '' }}"
|
|
lxc_guest_7_ip="{{ fw_lxc_guest_ips_v4[6] if fw_lxc_guest_ips_v4 | length >= 7 else '' }}"
|
|
|
|
lxc_guest_ips="{{ fw_lxc_guest_ips_v4 | join(' ') }}"
|
|
|
|
|
|
# - Devices given in list "nat_devices" will be natted
|
|
# -
|
|
# - Blank separated list
|
|
# -
|
|
nat_devices="{{ fw_nat_devices }}"
|