1

2026-07-11 02:13:05 +03:00 · 2026-07-11 02:13:05 +03:00 · 03b00e7967
commit 03b00e7967
parent 9bfaa8489a
2 changed files with 23 additions and 8 deletions
--- a/filter_plugins/pycache/ipaddr.cpython-39.pyc
+++ b/filter_plugins/pycache/ipaddr.cpython-39.pyc
--- a/playbooks/mrwho/vm03-firewall.yml
+++ b/playbooks/mrwho/vm03-firewall.yml
@ -96,11 +96,26 @@
 #        zone: external
 #        state: enabled
 #        permanent: true
-      - policy: lan-to-wan
-        state: enabled
-        permanent: true
-        masquerade: true
-        ingress_zones:
-          - internal
-        egress_zones:
-          - public
+#      - policy: lan-to-wan
+#        state: enabled
+#        permanent: true
+#        masquerade: true
+#        ingress_zones:
+#          - internal
+#        egress_zones:
+#          - public
+
+  post-tasks:
+    - name: Создаем политику firewalld
+      ansible.builtin.command: >
+        firewall-cmd --permanent --new-policy lan-to-wan
+      failed_when: false # Игнорируем ошибку, если политика уже создана
+
+    - name: Настраиваем зоны и правила для политики
+      ansible.builtin.command: "{{ item }}"
+      loop:
+        - "firewall-cmd --permanent --policy lan-to-wan --add-ingress-zone internal"
+        - "firewall-cmd --permanent --policy lan-to-wan --add-egress-zone public"
+        - "firewall-cmd --permanent --policy lan-to-wan --set-target ACCEPT"
+        - "firewall-cmd --permanent --policy lan-to-wan --masquerade"
+      notify: Reload firewalld