Compare commits
11 Commits
dev
...
a18dda51ac
| Author | SHA1 | Date | |
|---|---|---|---|
| a18dda51ac | |||
| 465ecfefc8 | |||
| 4b80cfe531 | |||
| 9adb8f8d2a | |||
| f63c643cc6 | |||
| 94726374ea | |||
| 6f27f0c47c | |||
| d36e7c34bf | |||
| 6458a4e0cf | |||
| 2e570f6808 | |||
| 1929ad13af |
@@ -152,16 +152,10 @@
|
|||||||
{{
|
{{
|
||||||
'/etc/pve/firewall/cluster.fw'
|
'/etc/pve/firewall/cluster.fw'
|
||||||
if clustered.stat.exists
|
if clustered.stat.exists
|
||||||
else '/etc/pve/nodes/' + pve_node + '/host.fw'
|
else '/etc/pve/nodes/' + pve_node + '.fw'
|
||||||
}}
|
}}
|
||||||
when: pve_installed.stat.exists | default(false)
|
when: pve_installed.stat.exists | default(false)
|
||||||
|
|
||||||
- name: fail2ban | Show firewall config path
|
|
||||||
ansible.builtin.debug:
|
|
||||||
msg: >
|
|
||||||
WARNING: Proxmox firewall config path is: {{ pve_firewall_config}}
|
|
||||||
when: pve_firewall_config is defined
|
|
||||||
|
|
||||||
#################################################
|
#################################################
|
||||||
# Detect firewall configuration
|
# Detect firewall configuration
|
||||||
#################################################
|
#################################################
|
||||||
@@ -178,19 +172,15 @@
|
|||||||
register: fw_content
|
register: fw_content
|
||||||
when: fw_stat.stat.exists | default(false)
|
when: fw_stat.stat.exists | default(false)
|
||||||
|
|
||||||
- name: fail2ban | Debug config contents
|
|
||||||
ansible.builtin.debug:
|
|
||||||
msg: >
|
|
||||||
{{ fw_content }}
|
|
||||||
when: fw_stat.stat.exists | default(false)
|
|
||||||
|
|
||||||
- name: fail2ban | Determine if firewall enabled
|
- name: fail2ban | Determine if firewall enabled
|
||||||
ansible.builtin.set_fact:
|
ansible.builtin.set_fact:
|
||||||
pve_firewall_enabled: >-
|
pve_firewall_enabled: >-
|
||||||
{{
|
{{
|
||||||
fw_stat.stat.exists and
|
(fw_stat.stat.exists | default(false)) and
|
||||||
(fw_content.content | b64decode)
|
(
|
||||||
is search('^enable:\s*1$', multiline=True)
|
(fw_content.content | default('') | b64decode)
|
||||||
|
is search('enable:\s*1')
|
||||||
|
)
|
||||||
}}
|
}}
|
||||||
|
|
||||||
- name: fail2ban | Warn if firewall not enabled
|
- name: fail2ban | Warn if firewall not enabled
|
||||||
|
|||||||
Reference in New Issue
Block a user