Add debian common role
This commit is contained in:
25
common-debian/templates/etc/nftables.conf.j2
Normal file
25
common-debian/templates/etc/nftables.conf.j2
Normal file
@@ -0,0 +1,25 @@
|
||||
#!/usr/sbin/nft -f
|
||||
# {{ ansible_managed }}
|
||||
|
||||
flush ruleset
|
||||
|
||||
table inet filter {
|
||||
chain input {
|
||||
type filter hook input priority 0;
|
||||
{% for rule in nftables_rules if rule.chain == "input" %}
|
||||
{{ rule.rule }};
|
||||
{% endfor %}
|
||||
}
|
||||
chain forward {
|
||||
type filter hook forward priority 0;
|
||||
{% for rule in nftables_rules if rule.chain == "forward" %}
|
||||
{{ rule.rule }};
|
||||
{% endfor %}
|
||||
}
|
||||
chain output {
|
||||
type filter hook output priority 0;
|
||||
{% for rule in nftables_rules if rule.chain == "output" %}
|
||||
{{ rule.rule }};
|
||||
{% endfor %}
|
||||
}
|
||||
}
|
Reference in New Issue
Block a user