Ansible Role: Router
Configure router functionality with NAT, firewall, and routing on Alpine Linux.
Variables
Network Interfaces
| Variable |
Required |
Default |
Description |
wan_interface |
Yes |
eth0 |
WAN network interface |
lan_interface |
Yes |
eth1 |
LAN network interface |
Firewall Rules
| Variable |
Required |
Default |
Description |
incoming_firewall_rules |
No |
[] |
List of incoming firewall rules |
NAT Configuration
| Variable |
Required |
Default |
Description |
nat_port_forwards |
No |
[] |
List of NAT port forwarding rules |
Tags
| Tag |
Description |
full |
Execute all tasks |
routing |
Configure routing and iptables |
firewall |
Configure firewall rules |
performance |
Configure performance tuning |
Example
wan_interface: "eth0"
lan_interface: "eth1"
incoming_firewall_rules:
- name: "allow ssh from lan"
source: "192.168.1.0/24"
protocol: "tcp"
port: 22
- name: "allow dns from lan"
source: "192.168.1.0/24"
protocol: "udp"
port: 53
nat_port_forwards:
- name: "forward https to web server"
dst: "192.168.1.10"
port: 443
protocol: "tcp"