opencast_firewalld's Introduction

Ansible: Opencast Firewalld Role

This Ansible role provides a simple firewalld configuration for Opencast. The idea behind this set-up is to:

Generally allow network communication within the cluster
Allow communication via HTTP(S) from the outside world

Requirements

This role uses community.general.dig to look up the IP addresses for the given hostnames. Make sure to have on your host system:

dnspython
community.general collection

Role Variables

opencast_firewall_internal_hosts
- List of hosts between which to allow all network communication (default: groups["all"])
opencast_firewall_http_hosts
- List of hosts to allow external HTTP communications to (default: groups["all"])
- Often makes sense to set this to something like groups["opencast"]
opencast_firewall_https_hosts
- List of hosts to allow external HTTPS communications to (default: opencast_firewall_http_hosts)
opencast_firewall_ipv4
- Look up IPv4 addresses of hostnames
opencast_firewall_ipv6
- Look up IPv6 addresses of hostnames

Example Playbook

Example of how to configure and use the role:

- hosts: servers
  become: true
  roles:
    - role: elan.opencast_firewalld
      opencast_firewall_http_hosts: '{{ groups["opencast"] }}'

opencast_firewalld's People

Contributors

Watchers

opencast_firewalld's Issues

Broken on Stream EL9

Attempting to deploy to develop.opencast.org:

TASK [elan.opencast_firewalld : Allow all internal communication (IPv4)] *********************************************************************
fatal: [develop.opencast.org]: FAILED! => {"msg": "An unhandled exception occurred while running the lookup plugin 'community.general.dig'. Error was a <class 'ansible.errors.AnsibleError'>, original message: The dig lookup requires the python 'dnspython' library and it is not installed. The dig lookup requires the python 'dnspython' library and it is not installed"}

I tried installing python3-dns and python3-py3dns to no avail.

Recommend Projects