firewall

firewall copied to clipboard

ci: This PR is to trigger periodic CI testing

114

This PR is for the purpose of triggering periodic CI testing. We don't currently have a way to trigger CI without a PR, so this PR serves that purpose.

systemroller

Make the role variable ansible-lint compliance

2

**What would you like to be added**: The `firewall` variable is not ansible-lint compliant: ```Ansible - name: Test hosts: localhost tasks: - name: Configure Firewall for Web Console ansible.builtin.include_role: name:...

deamen

Provide example or method to show differences between defined vs in-use configuration

11

Since replacing previous rules causes firewalld restart it is not suitable for most production environments. In case not replacing previous rules the defined configuration may not be what is in...

myllynen

An easy way to explicit deactivate previous: replaced for easier operation

10

**What would you like to be added**: I could'nt come up with an easy solution for dynamically overwrite or not overwrite the whole firewall config depending on a boolean. Why...

Markus-

**What would you like to be added**: I want to manage des protocols of a zone by using this role. `#> firewall-cmd --zone=block --add-protocol=ipv6-icmp` **Why is this needed**: For Ipv6...

Markus-

Manage policies

7

**What would you like to be added**: I would like to add and modify policies in the same way services are modified. ```yaml firewall: - policy: test priority: -15000 target:...

zanna-37

**What happened**: I am using the firewall role with the following definition: ```yml firewall: # Wipe existing config and replace with the config defined below. - previous: replaced # For...

rlenferink

ci: Avoid too large inline test logs in QEMU/KVM integration test

1

Some roles produce ansible/test logs which are too large to sensibly/comfortably view in the main workflow log view. Show only the interesting failures there (the lines around `fatal:`) and upload...

martinpitt

feat: support includes for services

3

Feature: Allow for includes to be specified for services. Includes are described at https://firewalld.org/documentation/man-pages/firewalld.service.html Reason: This makes firewalld services more explicit and easier / quicker to read when there are...

richm

Add `includes` when defining a custom service

1

**What would you like to be added**: Allow for `includes` when defining a custom service (https://firewalld.org/documentation/man-pages/firewalld.service.html), e.g. ```yml - name: Run firewall role ansible.builtin.include_role: name: fedora.linux_system_roles.firewall vars: firewall_disable_conflicting_services: true firewall:...

skwde