ansible-firewalld-role
ansible-firewalld-role copied to clipboard
FlatKey
Advanced Base role to configure firewalld through variables.
In check mode, set firewalld default zone fails with this error: `The conditional check 'defaultzone.stdout != default_zone' failed. The error was: error while evaluating conditional (defaultzone.stdout != default_zone): 'dict object'...
Most tasks where a zone is required default to 'public'. I suggest they should default to 'default_zone' and then to public, which can be achieved by doing this: zone: "{{...
set firewalld default zone fails when default_zone not set because of the conditional: when: defaultzone.stdout != default_zone I suggest removing the conditional altogether, as well as task "get actual firewalld...
The purge of unconfigured rich rules should be possible.
It's not possible to remove an interface from a zone or purge unconfigured interfaces.
