cloudamatic/mu

View on GitHub
ansible/roles/geerlingguy.firewall/tasks/disable-other-firewalls.yml

Summary

Maintainability
Test Coverage
---
- name: Check if firewalld package is installed (on RHEL).
  command: yum list installed firewalld
  args:
    warn: false
  register: firewalld_installed
  ignore_errors: true
  changed_when: false
  when:
    - ansible_os_family == "RedHat"
    - firewall_disable_firewalld
  check_mode: false

- name: Disable the firewalld service (on RHEL, if configured).
  service:
    name: firewalld
    state: stopped
    enabled: false
  when:
    - ansible_os_family == "RedHat"
    - firewall_disable_firewalld
    - firewalld_installed.rc == 0

- name: Check if ufw package is installed (on Ubuntu).
  command: service ufw status
  args:
    warn: false
  register: ufw_installed
  ignore_errors: true
  changed_when: false
  when:
    - ansible_distribution == "Ubuntu"
    - firewall_disable_ufw
  check_mode: false

- name: Disable the ufw firewall (on Ubuntu, if configured).
  service:
    name: ufw
    state: stopped
    enabled: false
  when:
    - ansible_distribution == "Ubuntu"
    - firewall_disable_ufw
    - ufw_installed.rc == 0

- name: Check if ufw package is installed (on Archlinux).
  command: pacman -Q ufw
  args:
    warn: false
  register: ufw_installed
  ignore_errors: true
  changed_when: false
  when:
    - ansible_distribution == "Archlinux"
    - firewall_disable_ufw
  check_mode: false

- name: Disable the ufw firewall (on Archlinux, if configured).
  service:
    name: ufw
    state: stopped
    enabled: false
  when:
    - ansible_distribution == "Archlinux"
    - firewall_disable_ufw
    - ufw_installed.rc == 0