adellam
/
ansible-roles
forked from ISTI-ansible-roles/ansible-roles
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

iptables: fix the restart of fail2ban and docker.

This commit is contained in:
Andrea Dell'Amico 2018-03-19 18:53:55 +01:00
parent a7f966b26e
commit 188f0ccb8a
2 changed files with 44 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
iptables/handlers/main.yml
View File

@ -20,3 +20,6 @@
command: /etc/init.d/iptables-persistent stop command: /etc/init.d/iptables-persistent stop
ignore_errors: true ignore_errors: true
- name: Restart fail2ban after an iptables restart
service: name=fail2ban state=restarted enabled=yes
when: has_fail2ban

51
iptables/tasks/main.yml
View File

@ -61,39 +61,70 @@
- name: Start the iptables service immediately after the new rules have been installed, on Ubuntu precise. This can have an impact on other tasks - name: Start the iptables service immediately after the new rules have been installed, on Ubuntu precise. This can have an impact on other tasks
service: name=iptables-persistent state=restarted enabled=yes service: name=iptables-persistent state=restarted enabled=yes
register: restart_related register: restart_related_p
notify: Restart fail2ban after an iptables restart
when: install_iptables_rules_precise is changed when: install_iptables_rules_precise is changed
- name: Start the iptables service immediately after the new rules have been installed, on Ubuntu Trusty. This can have an impact on other tasks - name: Start the iptables service immediately after the new rules have been installed, on Ubuntu Trusty. This can have an impact on other tasks
service: name=iptables-persistent state=restarted enabled=yes service: name=iptables-persistent state=restarted enabled=yes
register: restart_related register: restart_related_t
notify: Restart fail2ban after an iptables restart
when: install_iptables_rules_trusty is changed when: install_iptables_rules_trusty is changed
- name: Start the iptables service immediately after the new rules have been installed, on Debian 7. This can have an impact on other tasks - name: Start the iptables service immediately after the new rules have been installed, on Debian 7. This can have an impact on other tasks
service: name=iptables-persistent state=restarted enabled=yes service: name=iptables-persistent state=restarted enabled=yes
register: restart_related register: restart_related_d7
notify: Restart fail2ban after an iptables restart
when: install_iptables_rules_deb7 is changed when: install_iptables_rules_deb7 is changed
- name: Start the netfilter service immediately after the new rules have been installed. This can have an impact on other tasks - name: Start the netfilter service immediately after the new rules have been installed. This can have an impact on other tasks
service: name=netfilter-persistent state=restarted enabled=yes service: name=netfilter-persistent state=restarted enabled=yes
register: restart_related register: restart_related_x
notify: Restart fail2ban after an iptables restart
when: install_netfilter_rules is changed when: install_netfilter_rules is changed
- name: Restart fail2ban after an iptables restart - name: Check if the fail2ban service is present
stat: path=/usr/bin/fail2ban-server
register: fail2ban_installed
- name: Restart fail2ban after an iptables restart on Ubuntu Precise
service: name=fail2ban state=restarted enabled=yes service: name=fail2ban state=restarted enabled=yes
when: when:
- has_fail2ban - fail2ban_installed.stat.exists
- restart_related is changed - restart_related_p is changed
- name: Restart fail2ban after an iptables restart on Ubunt Trusty
service: name=fail2ban state=restarted enabled=yes
when:
- fail2ban_installed.stat.exists
- restart_related_t is changed
- name: Restart fail2ban after an iptables restart on debian 7
service: name=fail2ban state=restarted enabled=yes
when:
- fail2ban_installed.stat.exists
- restart_related_d7 is changed
- name: Restart fail2ban after an iptables restart on Ubuntu Xenial
service: name=fail2ban state=restarted enabled=yes
when:
- fail2ban_installed.stat.exists
- restart_related_x is changed
- name: Check if the docker service is present - name: Check if the docker service is present
stat: path=/usr/bin/dockerd stat: path=/usr/bin/dockerd
register: dockerd_installed register: dockerd_installed
when: restart_related is changed
- name: Restart docker after an iptables restart - name: Restart docker after an iptables restart on Ubuntu Trusty
service: name=docker state=restarted enabled=yes service: name=docker state=restarted enabled=yes
when: when:
- dockerd_installed.stat.exists - dockerd_installed.stat.exists
- restart_related is changed - restart_related_t is changed
- name: Restart docker after an iptables restart on Ubuntu Xenial
service: name=docker state=restarted enabled=yes
when:
- dockerd_installed.stat.exists
- restart_related_x is changed
tags: [ 'iptables', 'iptables_rules' ] tags: [ 'iptables', 'iptables_rules' ]