search

bloodymage / ansible-collection-autonomy

Ansible collection to install self hosted services
https://bloodymage.org
MIT License
22 stars 3 forks source link

Create role nftables #103

Open gderber opened 3 years ago

gderber commented 3 years ago

Needs to do the following:

gderber commented 3 years ago

References:

gderber commented 3 years ago

Required nftables configuration for Fail2ban. https://wiki.meurisse.org/wiki/Fail2Ban

gderber commented 3 years ago

Does nftables work with a nftables.d/* include? I think so, don't remember, this is a note for later.

The answer is yes.

#!/usr/sbin/nft -f

# include a single file using the default search path
include "ipv4-nat.ruleset"

# include all files ending in *.nft in the default search path
include "*.nft"

# include all files in a given directory using an absolute path
include "/etc/nftables/"

Refs: