https://github.com/devops-works/ansible-ferm
ferm ansible role
https://github.com/devops-works/ansible-ferm
Last synced: about 2 months ago
JSON representation
ferm ansible role
- Host: GitHub
- URL: https://github.com/devops-works/ansible-ferm
- Owner: devops-works
- License: gpl-3.0
- Created: 2019-09-03T08:54:39.000Z (over 6 years ago)
- Default Branch: master
- Last Pushed: 2024-02-12T20:28:32.000Z (about 2 years ago)
- Last Synced: 2025-10-30T07:37:19.340Z (5 months ago)
- Language: Jinja
- Size: 49.8 KB
- Stars: 2
- Watchers: 4
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Ansible ferm role
This role is a stripped down version of
[debops.ferm role](https://github.com/debops/ansible-ferm).
[ferm](http://ferm.foo-projects.org/) is a wrapper around `iptables` and
`ip6tables` commands which lets you manage host firewall in an easy and
Ansible-friendly way. This role can be used to setup firewall rules
directly from inventory, or it can be used as a dependency by other roles
to setup firewall rules for other services.
### Installation
This role requires at least Ansible `v1.7.0`. To install it, run:
ansible-galaxy install https://github.com/leucos/ansible-ferm.git
### Documentation
You can use this role as a simple dependency:
dependencies:
- role: ansible-ferm
name: ansible-ferm
src: https://github.com/leucos/ansible-ferm.git
ferm_input_group_list:
- type: 'dport_accept'
dport: [ '80' ]
saddr: '{{ some_ansible_group }}'
weight: '50'
filename: 'gluster_accept'
If you need more control, you can skip the `ferm_input_group_list` part
and push specific templates from your role.
See [ansible-pxc](https://github.com/leucos/ansible-pxc.git) role for this.
### Issues
This role is WIP and lacks tests.
### Authors
This role is based on `ferm` role written by [Maciej Delmanowski](https://github.com/drybjed) of [DebOps](https://github.com/debops) fame.
Adapted by Michel Blanc ([Twitter](https://twitter.com/b9m) | [GitHub](https://github.com/leucos)
### Licence
License: [MIT](http://opensource.org/licenses/MIT)