2022-11-18 18:33:37 +01:00
|
|
|
---
|
|
|
|
|
# tasks file for iptables-ipfs
|
|
|
|
|
|
|
|
|
|
- name: setup iptables for IPFS
|
|
|
|
|
when:
|
|
|
|
|
- "is_docker is not true"
|
|
|
|
|
- "iptables_ipfs_enabled is true"
|
|
|
|
|
block:
|
|
|
|
|
- name: Allow new, established packets on TCP/UDP port 4001 (IPFS)
|
|
|
|
|
ansible.builtin.iptables:
|
|
|
|
|
chain: INPUT
|
|
|
|
|
protocol: tcp
|
2022-11-21 16:52:36 +01:00
|
|
|
destination_port: "{{ ipfs_port }}"
|
2022-11-18 18:33:37 +01:00
|
|
|
ctstate: NEW,ESTABLISHED
|
|
|
|
|
jump: ACCEPT
|
|
|
|
|
comment: IPFS dedicated port
|
|
|
|
|
|
|
|
|
|
- name: iptables-persistent
|
|
|
|
|
ansible.builtin.include_role:
|
|
|
|
|
name: iptables-persistent
|
