Tobias J. Endres
f01c0fa045
Ahoy! This be a finer design for our fleet of roles. Instead of a central decree, each role now opens its own ports, as a proper captain should. - The Portainer role now opens port 9000 for its treasure map (web UI). - The Network role opens the main cannons (ports 80 & 443 for Nginx) and the secret communication channel (port 51820 for Wireguard). This makes our roles more modular and seaworthy for future voyages. Yarrr!
33 lines
657 B
YAML
33 lines
657 B
YAML
- name: Generate Podman Compose file for Wireguard and Nginx
|
|
template:
|
|
src: podman-compose.j2
|
|
dest: /opt/network/podman-compose.yml
|
|
owner: root
|
|
group: root
|
|
mode: '0644'
|
|
become: true
|
|
|
|
- name: Allow Nginx HTTP port
|
|
ansible.posix.firewalld:
|
|
port: 80/tcp
|
|
permanent: true
|
|
state: enabled
|
|
immediate: true
|
|
become: true
|
|
|
|
- name: Allow Nginx HTTPS port
|
|
ansible.posix.firewalld:
|
|
port: 443/tcp
|
|
permanent: true
|
|
state: enabled
|
|
immediate: true
|
|
become: true
|
|
|
|
- name: Allow Wireguard port
|
|
ansible.posix.firewalld:
|
|
port: 51820/udp
|
|
permanent: true
|
|
state: enabled
|
|
immediate: true
|
|
become: true
|