debops / ansible-ferm

Manage iptables firewall using ferm
GNU General Public License v3.0
32 stars 20 forks source link

Running simple playbooks kills SSH connection #72

Open htgoebel opened 8 years ago

htgoebel commented 8 years ago

When setting up a fresh test system using

debops bootstrap --sudo -K -l server-test
debops yacy -l server-test   # this is my new playbook

the ssh connection get blocks as soon as "Apply iptables rules if ferm is enabled" is run.

The new playbook simply installs YaCr behind nginx.

drybjed commented 8 years ago

debops.ferm uses data gathered by debops.core role to allow connections from Ansible Controller. debops.core is a required role, so if you only want to use specific playbooks with a host without running the common.yml playbook, you should at least include the core.yml playbook in your set of playbooks.

Alternatively, you can use ferm_ansible_controllers to tell ferm which hosts should be explicitly allowed to connect to the remote host without any restrictions.

varac commented 6 years ago

I ran into this as well. I agree with @drybjed but this behaviour should be documented in BIG LETTERS on the debops-ferm doc entry page pls !

drybjed commented 6 years ago

You can do the PR yourself. :-) If you do, please do it against the DebOps monorepo so it can be included in the future documentation, when it's updated and exported from that repository.