summaryrefslogtreecommitdiff
path: root/personal_infra/playbooks
diff options
context:
space:
mode:
authoralex <alex@pdp7.net>2023-09-16 13:36:12 +0200
committeralex <alex@pdp7.net>2023-09-16 13:36:44 +0200
commit08f1aa211ba740fa6bb4b6c6de5bc77feb651570 (patch)
treeaa7e22e29b558ca0f63d09dc9bf11dc9804277e6 /personal_infra/playbooks
parenta6bae76691681c0c8df876377bca2439567cdc59 (diff)
Add finer firewall control
Diffstat (limited to 'personal_infra/playbooks')
-rw-r--r--personal_infra/playbooks/roles/deploy_ragent/tasks/main.yml4
1 files changed, 2 insertions, 2 deletions
diff --git a/personal_infra/playbooks/roles/deploy_ragent/tasks/main.yml b/personal_infra/playbooks/roles/deploy_ragent/tasks/main.yml
index 4df4cc03..38cacab5 100644
--- a/personal_infra/playbooks/roles/deploy_ragent/tasks/main.yml
+++ b/personal_infra/playbooks/roles/deploy_ragent/tasks/main.yml
@@ -33,10 +33,10 @@
state: restarted
- name: open firewall
command: firewall-cmd --permanent --add-port=21488/tcp
- when: ansible_os_family == "RedHat" and ansible_distribution_major_version in ("7", "8", "9") and ansible_virtualization_type != "lxc"
+ when: ansible_os_family == "RedHat" and ansible_distribution_major_version in ("7", "8", "9") and ansible_virtualization_type != "lxc" and not network.disable_firewall
- name: reload firewall
command: firewall-cmd --reload
- when: ansible_os_family == "RedHat" and ansible_distribution_major_version in ("7", "8", "9") and ansible_virtualization_type != "lxc"
+ when: ansible_os_family == "RedHat" and ansible_distribution_major_version in ("7", "8", "9") and ansible_virtualization_type != "lxc" and not network.disable_firewall
- name: force check
community.general.nagios:
action: forced_check