Iptables support - Githubissues

Wiredcraft / devops-ansible

Ansible folder structure, including playbooks / plugins / etc.

0 stars 1 forks source link

Iptables support #35

Closed zbal closed 8 years ago

zbal commented 10 years ago

Need to get security under way:

etcd gets a lot of valuable data available (passwords and shit)
database are available worldwide, etc.

Need to apply iptables restriction very very very soon.

Suggestion:

get a FW software in place on all boxes (ufw ? firewalld ?) ?
use bare iptables FW
Either way need to be manageable via ansible - either via script or ansible module (only firewalld available currently)...

zbal commented 10 years ago

suggest to create an ansible module