firewalld

Install, configure, and manage firewalld zones and rules.

Usage

- hosts: all
  roles:
    - role: giftpilz0.general.firewalld

Variables

firewalld_service_namestr
systemd service unit name.
Defaultfirewalld.service
firewalld_service_statestr
desired state of the firewalld service.
Choicesreloadedrestartedstartedstopped
Defaultstarted
firewalld_service_enabledbool
whether the firewalld service is enabled at boot.
Defaulttrue
firewalld_package_statestr
desired state of firewalld packages.
Choicespresentabsentlatest
Defaultpresent
firewalld_packagelist[str]
list of packages to install.
Default- firewalld
firewalld_loggingstr
LogDenied setting in firewalld.conf.
Defaultall
firewalld_permanentbool
whether rules are applied permanently.
Defaulttrue
firewalld_immediatebool
whether rules are applied immediately.
Defaulttrue
firewalld_default_zonestr
default firewall zone.
Defaultblock
firewalld_require_sshbool
fail when no enabled ssh rule exists for a defined zone.
Defaulttrue
firewalld_remove_unmanagedbool
remove sources, services and ports that are not in the inventory.
Defaultfalse
firewalld_rule_defaultsdict
values for keys missing in icmp, service and port rules.
Defaultstate: enabled
firewalld_zones_definelist[dict]
list of zones to create and configure.
Default[]
- zonestr
  zone name.
- sourcestr
  zone source (e.g. CIDR).
- targetstr
  zone target.
firewalld_rules_icmplist[dict]
list of ICMP block rules.
Default[]
- icmp_typestr
  ICMP type to block.
- zonestr
  target zone.
- statestr
  whether the rule is enabled or disabled.
  Choicesenableddisabled
firewalld_rules_serviceslist[dict]
list of service rules.
Default[]
- servicestr
  service name.
- zonestr
  target zone.
- statestr
  whether the rule is enabled or disabled.
  Choicesenableddisabled
firewalld_rules_portslist[dict]
list of port rules.
Default[]
- portstr
  port number.
- protocolstr
  protocol.
  Choicestcpudp
- zonestr
  target zone.
- statestr
  whether the rule is enabled or disabled.
  Choicesenableddisabled
firewalld_richrules_portslist[dict]
list of rich rules for port access.
Default[]
- allowipstr
  source IP to allow.
- portstr
  port number.
- protocolstr
  protocol.
  Choicestcpudp
- actionstr
  rich rule action (e.g. accept).
- zonestr
  target zone.
firewalld_richrules_serviceslist[dict]
list of rich rules for service access.
Default[]
- allowipstr
  source IP to allow.
- servicestr
  service name.
- actionstr
  rich rule action (e.g. accept).
- zonestr
  target zone.