infra-role-geth/tasks/firewall.yml

---
- name: Geth | Enable ports on firewall
  iptables:
    comment: '{{ geth_cont_name }} {{ item }}'
    jump: 'ACCEPT'
    chain: 'SERVICES'
    source: '0.0.0.0/0'
    protocol: '{{ item }}'
    destination_port: '{{ geth_port | string }}'
  with_items:
    - tcp
    - udp
  notify:
    - Save iptables rules
add tasks, defailts, and handlers for the role Signed-off-by: Jakub Sokołowski <jakub@status.im> 2019-04-26 11:54:14 +02:00			`---`
fix name of firewall rule Signed-off-by: Jakub Sokołowski <jakub@status.im> 2019-04-26 12:40:10 +02:00			`- name: Geth \| Enable ports on firewall`
add tasks, defailts, and handlers for the role Signed-off-by: Jakub Sokołowski <jakub@status.im> 2019-04-26 11:54:14 +02:00			`iptables:`
expose both tcp and udp ports for geth Signed-off-by: Jakub Sokołowski <jakub@status.im> 2019-04-26 13:45:01 +02:00			`comment: '{{ geth_cont_name }} {{ item }}'`
firewall: add rules to new SERVICES chain https://github.com/status-im/infra-hq/issues/69 https://github.com/status-im/infra-role-bootstrap-linux/commit/92d8923b https://github.com/status-im/infra-role-wireguard/commit/8394639e Signed-off-by: Jakub Sokołowski <jakub@status.im> 2021-08-02 19:39:55 +02:00			`jump: 'ACCEPT'`
			`chain: 'SERVICES'`
add tasks, defailts, and handlers for the role Signed-off-by: Jakub Sokołowski <jakub@status.im> 2019-04-26 11:54:14 +02:00			`source: '0.0.0.0/0'`
expose both tcp and udp ports for geth Signed-off-by: Jakub Sokołowski <jakub@status.im> 2019-04-26 13:45:01 +02:00			`protocol: '{{ item }}'`
explicit conversion to string Signed-off-by: Jakub Sokołowski <jakub@status.im> 2019-08-09 21:54:31 -04:00			`destination_port: '{{ geth_port \| string }}'`
expose both tcp and udp ports for geth Signed-off-by: Jakub Sokołowski <jakub@status.im> 2019-04-26 13:45:01 +02:00			`with_items:`
			`- tcp`
			`- udp`
add tasks, defailts, and handlers for the role Signed-off-by: Jakub Sokołowski <jakub@status.im> 2019-04-26 11:54:14 +02:00			`notify:`
			`- Save iptables rules`