ansible-role-firewall
ansible-role-firewall copied to clipboard
Backup the generated files
Could you add backup: yes on the rules templates tasks so that an horrible mistake could be easily undone ?
By the way, thanks for this role and the smart use of combining the hashes.
I am open to suggestions. Would /etc/iptables.v{4,6}.backup be a good idea? Created only if it does not exists?
I guess you should create it always, because each ansible run has to generate a backup of the previous run. It's not completely error-proof, as a backup will be overwritten on the second ansible run, but it's better than nothing.