|
|
|
|
|
|
|
|
# UFW management module |
|
|
# UFW management module |
|
|
{%- set ufw = pillar.get('ufw', {}) %} |
|
|
{%- set ufw = pillar.get('ufw', {}) %} |
|
|
{%- if ufw.get('enabled', False) %} |
|
|
{%- if ufw.get('enabled', False) %} |
|
|
|
|
|
{% from "ufw/map.jinja" import ufwmap with context %} |
|
|
{% set default_template = ufw.get('default_template', 'salt://ufw/templates/default.jinja') -%} |
|
|
{% set default_template = ufw.get('default_template', 'salt://ufw/templates/default.jinja') -%} |
|
|
{% set sysctl_template = ufw.get('sysctl_template', 'salt://ufw/templates/sysctl.jinja') -%} |
|
|
{% set sysctl_template = ufw.get('sysctl_template', 'salt://ufw/templates/sysctl.jinja') -%} |
|
|
|
|
|
|
|
|
ufw: |
|
|
ufw: |
|
|
pkg.installed: |
|
|
pkg.installed: |
|
|
- name: ufw |
|
|
|
|
|
|
|
|
- name: {{ ufwmap.pkg }} |
|
|
service.running: |
|
|
service.running: |
|
|
- enable: True |
|
|
- enable: True |
|
|
- watch: |
|
|
- watch: |