aboutsummaryrefslogtreecommitdiff
path: root/ansible/managing-ufw-rules.md
diff options
context:
space:
mode:
Diffstat (limited to 'ansible/managing-ufw-rules.md')
-rw-r--r--ansible/managing-ufw-rules.md13
1 files changed, 13 insertions, 0 deletions
diff --git a/ansible/managing-ufw-rules.md b/ansible/managing-ufw-rules.md
new file mode 100644
index 0000000..c48b56b
--- /dev/null
+++ b/ansible/managing-ufw-rules.md
@@ -0,0 +1,13 @@
+# UFW rules management using Ansible
+
+Since ufw is part of the community.general collection, ensure it's installed on the Ansible control machine:
+
+```sh
+ansible-galaxy collection install community.general
+```
+
+It is by default installed and enabled with ALLOW rules for SSH, HTTP and HTTPS on all images generated for this homelab.
+
+The tasks are defined in `ansible/roles/common/tasks/ufw.yml`.
+
+It is called by `ansible/playbooks/common.yml`.