diff --git a/roles/ufw/tasks/main.yml b/roles/ufw/tasks/main.yml index dbc3dbe..3fd31bf 100644 --- a/roles/ufw/tasks/main.yml +++ b/roles/ufw/tasks/main.yml @@ -16,13 +16,14 @@ policy: allow direction: outgoing -- name: allow incoming traffic for ssh and web server +- name: incoming rules ufw: rule: allow direction: in - to_port: "{{ item }}" - proto: tcp - with_items: "{{ ufw_allow_in }}" + to_port: "{{ item.port if 'port' in item else item }}" + proto: "{{ item.proto if 'proto' in item else 'tcp' }}" + loop: "{{ ufw_allow }}" + - name: enable ufw ufw: