summaryrefslogtreecommitdiffstats
path: root/roles/common/tasks
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2013-10-31 19:01:39 +0100
committerGuilhem Moulin <guilhem@fripost.org>2015-06-07 02:50:34 +0200
commitd4c07ed2674cc3c46e3940129a476f50e1931a2a (patch)
tree17c1cf246b80044a0bf2b52d3022a388a6b21ce5 /roles/common/tasks
parenta3be458262fdeeaae2acaf098e47ecabe62cad09 (diff)
Don't save dynamic rules.
These rules are automatically included by third-party servers such as strongSwan or fail2ban.
Diffstat (limited to 'roles/common/tasks')
-rw-r--r--roles/common/tasks/firewall.yml14
1 files changed, 7 insertions, 7 deletions
diff --git a/roles/common/tasks/firewall.yml b/roles/common/tasks/firewall.yml
index d15384a..b1cd9b1 100644
--- a/roles/common/tasks/firewall.yml
+++ b/roles/common/tasks/firewall.yml
@@ -23,15 +23,15 @@
owner=root group=root
mode=0755
-- name: Ensure the firewall is up to date
- command: /usr/local/sbin/update-firewall.sh -c
- register: rv
- changed_when: rv.rc
- notify:
- - Unsafe firewall update
-
- name: Make the iptable ruleset persistent
copy: src=etc/network/if-pre-up.d/iptables
dest=/etc/network/if-pre-up.d/iptables
owner=root group=root
mode=0755
+
+- name: Ensure the firewall is up to date
+ command: /usr/local/sbin/update-firewall.sh -c
+ register: rv
+ # A non-zero return value will make ansible stop and show stderr. This
+ # is what we want.
+ changed_when: rv.rc