From fbcf643e474edce8e42b12ea383ec8ebeb4c9ff5 Mon Sep 17 00:00:00 2001
From: Trygve Laugstøl <trygvis@inamo.no>
Date: Thu, 27 Dec 2018 23:36:24 +0100
Subject: ufw

---
 ansible/roles/ufw/tasks/main.yml | 34 ++++++++++++++++++++++++++++++++++
 1 file changed, 34 insertions(+)
 create mode 100644 ansible/roles/ufw/tasks/main.yml

(limited to 'ansible/roles/ufw')

diff --git a/ansible/roles/ufw/tasks/main.yml b/ansible/roles/ufw/tasks/main.yml
new file mode 100644
index 0000000..e66ef58
--- /dev/null
+++ b/ansible/roles/ufw/tasks/main.yml
@@ -0,0 +1,34 @@
+- tags:
+    - ufw
+  become: yes
+  block:
+    - when: ufw__nat_address is defined
+      blockinfile:
+        path: /etc/ufw/before.rules
+        insertbefore: "^# Don't delete these required lines"
+        content: |
+          # NAT table rules
+          *nat
+          :POSTROUTING ACCEPT [0:0]
+
+          # Forward traffic through eth0 - Change to match you out-interface
+          -A POSTROUTING -s {{ ufw__nat_address }}/{{ ufw__nat_prefix }} -o eth0 -j MASQUERADE
+
+          # don't delete the 'COMMIT' line or these nat table rules won't
+          # be processed
+          COMMIT
+
+#    - ufw:
+#        state: enabled
+
+#    - ufw:
+#        default: allow
+#        direction: out
+
+#    - ufw:
+#        policy: deny
+#        direction: out
+
+#    - ufw:
+#        policy: allow
+#        direction: routed
-- 
cgit v1.2.3