{"id":21400236,"url":"https://github.com/oefenweb/ansible-ufw","last_synced_at":"2025-03-15T20:12:18.951Z","repository":{"id":20339356,"uuid":"23613931","full_name":"Oefenweb/ansible-ufw","owner":"Oefenweb","description":"Ansible role to set up ufw in Debian-like systems","archived":false,"fork":false,"pushed_at":"2024-09-12T10:16:34.000Z","size":135,"stargazers_count":60,"open_issues_count":8,"forks_count":21,"subscribers_count":4,"default_branch":"master","last_synced_at":"2025-02-28T10:53:44.748Z","etag":null,"topics":["ansible","debian","firewall","ubuntu","ufw"],"latest_commit_sha":null,"homepage":null,"language":"Jinja","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"USEPA/EPA-Metadata-Editor-3","license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Oefenweb.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2014-09-03T09:15:00.000Z","updated_at":"2025-01-23T03:10:36.000Z","dependencies_parsed_at":"2023-01-11T20:48:29.487Z","dependency_job_id":"377c21b6-b2e3-4513-b437-02389baba8d3","html_url":"https://github.com/Oefenweb/ansible-ufw","commit_stats":{"total_commits":130,"total_committers":8,"mean_commits":16.25,"dds":"0.11538461538461542","last_synced_commit":"5a944e7e41897a11cb8fc28382807bd312d36c6b"},"previous_names":[],"tags_count":57,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Oefenweb%2Fansible-ufw","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Oefenweb%2Fansible-ufw/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Oefenweb%2Fansible-ufw/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Oefenweb%2Fansible-ufw/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Oefenweb","download_url":"https://codeload.github.com/Oefenweb/ansible-ufw/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":243784433,"owners_count":20347409,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["ansible","debian","firewall","ubuntu","ufw"],"created_at":"2024-11-22T15:19:59.834Z","updated_at":"2025-03-15T20:12:18.931Z","avatar_url":"https://github.com/Oefenweb.png","language":"Jinja","funding_links":[],"categories":[],"sub_categories":[],"readme":"## ufw\n\n[![CI](https://github.com/Oefenweb/ansible-ufw/workflows/CI/badge.svg)](https://github.com/Oefenweb/ansible-ufw/actions?query=workflow%3ACI)\n[![Ansible Galaxy](http://img.shields.io/badge/ansible--galaxy-ufw-blue.svg)](https://galaxy.ansible.com/Oefenweb/ufw)\n\nSet up ufw in Debian-like systems.\n\n#### Requirements\n\nNone\n\n#### Variables\n\n* `ufw_default_incoming_policy` [default: `deny`]: Default (incoming) policy\n* `ufw_default_outgoing_policy` [default: `allow`]: Default (outgoing) policy\n\n* `ufw_logging` [default: `off`]: Log level\n\n* `ufw_rules` [default: see `defaults/main.yml`]: Rules to apply\n\n* `ufw_etc_default_ipv6` [default: `true`]: Set to yes to apply rules to support IPv6\n* `ufw_etc_default_default_input_policy` [default: `DROP`]: Set the default input policy to `ACCEPT`, `DROP`, or `REJECT`. Please note that if you change this you will most likely want to adjust your rules\n* `ufw_etc_default_default_output_policy` [default: `ACCEPT`]: Set the default output policy to `ACCEPT`, `DROP`, or `REJECT`. Please note that if you change this you will most likely want to adjust your rules\n* `ufw_etc_default_default_forward_policy` [default: `DROP`]: Set the default forward policy to `ACCEPT`, `DROP` or `REJECT`.  Please note that if you change this you will most likely want to adjust your rules\n* `ufw_etc_default_default_application_policy` [default: `SKIP`]: Set the default application policy to `ACCEPT`, `DROP`, `REJECT` or `SKIP`. Please note that setting this to `ACCEPT` may be a security risk\n* `ufw_etc_default_manage_builtins` [default: `false`]: By default, ufw only touches its own chains. Set this to 'yes' to have ufw manage the built-in chains too. Warning: setting this to 'yes' will break non-ufw managed firewall rules\n* `ufw_etc_default_ipt_sysctl` [default: `/etc/ufw/sysctl.conf`]: IPT backend, only enable if using iptables backend\n* `ufw_etc_default_ipt_modules` [default: `[nf_conntrack_ftp, nf_nat_ftp, nf_conntrack_netbios_ns]`]: Extra connection tracking modules to load. Complete list can be found in `net/netfilter/Kconfig` of your kernel source\n\n## Dependencies\n\nNone\n\n#### Example\n\n```yaml\n---\n- hosts: all\n  roles:\n    - oefenweb.ufw\n```\n\n##### Allow ssh\n```yaml\n- hosts: all\n  roles:\n    - oefenweb.ufw\n  vars:\n    ufw_rules:\n      - rule: allow\n        to_port: 22\n        protocol: tcp\n        comment: 'allow incoming connection on standard ssh port'\n```\n\n##### Allow all traffic on eth1\n```yaml\n- hosts: all\n  roles:\n    - oefenweb.ufw\n  vars:\n    ufw_rules:\n      - rule: allow\n        interface: eth1\n        to_port: ''\n        comment: 'allow all traffic on interface eth1'\n```\n\n##### Allow snmp traffic from 1.2.3.4 on eth0\n```yaml\n- hosts: all\n  roles:\n    - oefenweb.ufw\n  vars:\n    ufw_rules:\n      - rule: allow\n        interface: eth0\n        from_ip: 1.2.3.4\n        to_port: 161\n        protocol: udp\n```\n\n#### License\n\nMIT\n\n#### Author Information\n\nMischa ter Smitten (based on work of weareinteractive)\n\n#### Feedback, bug-reports, requests, ...\n\nAre [welcome](https://github.com/Oefenweb/ansible-ufw/issues)!\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Foefenweb%2Fansible-ufw","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Foefenweb%2Fansible-ufw","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Foefenweb%2Fansible-ufw/lists"}