chore: add comments before tasks and handlers
This commit is contained in:
parent
d08faaf862
commit
ddbd4d78e9
3 changed files with 7 additions and 6 deletions
|
|
@ -1,13 +1,8 @@
|
||||||
---
|
---
|
||||||
|
|
||||||
|
# restart iptables
|
||||||
- name: "restart iptables"
|
- name: "restart iptables"
|
||||||
ansible.builtin.service:
|
ansible.builtin.service:
|
||||||
name: "iptables"
|
name: "iptables"
|
||||||
state: "restarted"
|
state: "restarted"
|
||||||
when: "ipv4_enabled"
|
when: "ipv4_enabled"
|
||||||
|
|
||||||
- name: "restart ip6tables"
|
|
||||||
ansible.builtin.service:
|
|
||||||
name: "ip6tables"
|
|
||||||
state: "restarted"
|
|
||||||
when: "ipv6_enabled"
|
|
||||||
|
|
|
||||||
|
|
@ -1,17 +1,20 @@
|
||||||
---
|
---
|
||||||
|
|
||||||
|
# routing
|
||||||
- name: "routing"
|
- name: "routing"
|
||||||
ansible.builtin.import_tasks: "routing.yaml"
|
ansible.builtin.import_tasks: "routing.yaml"
|
||||||
tags:
|
tags:
|
||||||
- "all"
|
- "all"
|
||||||
- "routing"
|
- "routing"
|
||||||
|
|
||||||
|
# firewall
|
||||||
- name: "firewall"
|
- name: "firewall"
|
||||||
ansible.builtin.import_tasks: "firewall.yaml"
|
ansible.builtin.import_tasks: "firewall.yaml"
|
||||||
tags:
|
tags:
|
||||||
- "all"
|
- "all"
|
||||||
- "firewall"
|
- "firewall"
|
||||||
|
|
||||||
|
# performance
|
||||||
- name: "performance"
|
- name: "performance"
|
||||||
ansible.builtin.import_tasks: "performance.yaml"
|
ansible.builtin.import_tasks: "performance.yaml"
|
||||||
tags:
|
tags:
|
||||||
|
|
|
||||||
|
|
@ -1,5 +1,6 @@
|
||||||
---
|
---
|
||||||
|
|
||||||
|
# install iptables
|
||||||
- name: "install iptables"
|
- name: "install iptables"
|
||||||
community.general.apk:
|
community.general.apk:
|
||||||
name:
|
name:
|
||||||
|
|
@ -7,6 +8,7 @@
|
||||||
state: "present"
|
state: "present"
|
||||||
update_cache: true
|
update_cache: true
|
||||||
|
|
||||||
|
# enable ipv4 forwarding
|
||||||
- name: "configure ipv4 forwarding"
|
- name: "configure ipv4 forwarding"
|
||||||
ansible.posix.sysctl:
|
ansible.posix.sysctl:
|
||||||
name: "net.ipv4.conf.all.forwarding"
|
name: "net.ipv4.conf.all.forwarding"
|
||||||
|
|
@ -15,6 +17,7 @@
|
||||||
sysctl_file: "/etc/sysctl.conf"
|
sysctl_file: "/etc/sysctl.conf"
|
||||||
reload: false
|
reload: false
|
||||||
|
|
||||||
|
# disable ipv4 redirects and source routing
|
||||||
- name: "disable ipv4 redirects and source routing"
|
- name: "disable ipv4 redirects and source routing"
|
||||||
ansible.posix.sysctl:
|
ansible.posix.sysctl:
|
||||||
name: "{{ item.name }}"
|
name: "{{ item.name }}"
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue