https://github.com/elan-ev/opencast_firewalld

Ansible role providing a simple firewalld configuration for Opencast
https://github.com/elan-ev/opencast_firewalld

ansible ansible-role opencast

Last synced: about 1 month ago
JSON representation

Ansible role providing a simple firewalld configuration for Opencast

• Host: GitHub
• URL: https://github.com/elan-ev/opencast_firewalld
• Owner: elan-ev
• License: bsd-3-clause
• Created: 2021-07-01T17:05:03.000Z (almost 5 years ago)
• Default Branch: main
• Last Pushed: 2024-07-23T07:16:55.000Z (almost 2 years ago)
• Last Synced: 2025-10-19T19:55:49.838Z (8 months ago)
• Topics: ansible, ansible-role, opencast
• Homepage:
• Size: 11.7 KB
• Stars: 0
• Watchers: 2
• Forks: 1
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

          
Ansible: Opencast Firewalld Role

================================

This Ansible role provides a simple firewalld configuration for Opencast.

The idea behind this set-up is to:

- Generally allow network communication within the cluster

- Allow communication via HTTP(S) from the outside world

Requirements

------------

This role uses [community.general.dig](https://docs.ansible.com/ansible/latest/collections/community/general/dig_lookup.html)

to look up the IP addresses for the given hostnames.

Make sure to have on your host system:

- dnspython

- [community.general collection](https://galaxy.ansible.com/community/general)

Role Variables

--------------

- `opencast_firewall_internal_hosts`

    - List of hosts between which to allow all network communication (default: `groups["all"]`)

- `opencast_firewall_http_hosts`

    - List of hosts to allow external HTTP communications to (default: `groups["all"]`)

    - Often makes sense to set this to something like `groups["opencast"]`

- `opencast_firewall_https_hosts`

    - List of hosts to allow external HTTPS communications to (default: `opencast_firewall_http_hosts`)

- `opencast_firewall_ipv4`

    - Look up IPv4 addresses of hostnames

- `opencast_firewall_ipv6`

    - Look up IPv6 addresses of hostnames

Example Playbook

----------------

Example of how to configure and use the role:

```yaml

- hosts: servers

  become: true

  roles:

    - role: elan.opencast_firewalld

      opencast_firewall_http_hosts: '{{ groups["opencast"] }}'

```