Feat(firewall): Configure Debian iptables firewall

[ansible.git] / playbooks / debian / roles / firewall / tasks / main.yml

diff --git a/playbooks/debian/roles/firewall/tasks/main.yml b/playbooks/debian/roles/firewall/tasks/main.yml
new file mode 100644 (file)
index 0000000..02d5b20
--- /dev/null
+++ b/playbooks/debian/roles/firewall/tasks/main.yml
@@ -0,0 +1,27 @@
+- name: Install fail2ban
+  become: true
+  apt:
+    install_recommends: no
+    name: fail2ban
+    state: latest
+    update_cache: yes
+
+- name: Configure Debian firewall
+  become: true
+  copy:
+    src: etc
+    dest: /
+    owner: root
+    group: root
+    mode: '0750'
+    force: no
+
+- name: Fix permissions for /etc/network/functions
+  become: true
+  file:
+    path: /etc/network/functions.phd
+    mode: '0640'
+
+- name: Start Debian firewall
+  become: true
+  command: /etc/init.d/iptables.sh start