test other version

2025-08-26 21:59:21 +02:00
parent b2459a2dc0
commit 7a2ccb537b
98 changed files with 2830 additions and 1291 deletions
--- a/roles/01-server_hardening/tasks/03-firewall-setup.yml
+++ b/roles/01-server_hardening/tasks/03-firewall-setup.yml
@@ -0,0 +1,32 @@
+---
+- name: Install UFW
+  ansible.builtin.apt:
+    name: ufw
+    state: present
+  when: firewall_enabled | bool
+
+- name: Reset UFW rules
+  community.general.ufw:
+    state: reset
+  when: firewall_enabled | bool
+
+- name: Allow SSH port
+  community.general.ufw:
+    rule: allow
+    port: "{{ ssh_port }}"
+    proto: tcp
+  when: firewall_enabled | bool
+
+- name: Allow Minecraft port
+  community.general.ufw:
+    rule: allow
+    port: "25565"
+    proto: tcp
+  when: firewall_enabled | bool
+
+- name: Enable UFW
+  community.general.ufw:
+    state: enabled
+    policy: deny
+  when: firewall_enabled | bool
+  notify: "reload firewall"