Skip to content

cisagov/ansible-role-ufw

Repository files navigation

ansible-role-ufw

GitHub Build Status CodeQL

An Ansible role for installing Uncomplicated Firewall (UFW).

Note

We cannot currently test any ARM64 platforms under QEMU because QEMU cannot currently support iptables.

Requirements

None.

Role Variables

Variable Description Default Required
ufw_logging The logging state for ufw. See options here. Quotes are needed around this value because the words on and off denote boolean values in Ansible. "on" No
ufw_state The state of ufw. See options here. enabled No

Dependencies

None.

Installation

This role can be installed via the command:

ansible-galaxy install --role-file path/to/requirements.yml

where requirements.yml looks like:

---
- name: ufw
  src: https://github.com/cisagov/ansible-role-ufw

and may contain other roles as well.

For more information about installing Ansible roles via a YAML file, please see the ansible-galaxy documentation.

Example Playbook

Here's how to use it in a playbook:

- hosts: all
  become: true
  become_method: sudo
  tasks:
    - name: Install ufw
      ansible.builtin.include_role:
        name: ufw

Contributing

We welcome contributions! Please see CONTRIBUTING.md for details.

License

This project is in the worldwide public domain.

This project is in the public domain within the United States, and copyright and related rights in the work worldwide are waived through the CC0 1.0 Universal public domain dedication.

All contributions to this project will be released under the CC0 dedication. By submitting a pull request, you are agreeing to comply with this waiver of copyright interest.

Author Information

Shane Frasier - [email protected]

About

An Ansible role for installing Uncomplicated Firewall (UFW)

Topics

Resources

License

Security policy

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published