mirror of
https://github.com/trailofbits/algo
synced 2024-11-10 01:11:07 +00:00
52 lines
1.3 KiB
YAML
52 lines
1.3 KiB
YAML
|
---
|
||
|
|
|
||
|
|
- set_fact:
|
||
|
|
tools:
|
||
|
|
- git
|
||
|
|
- subversion
|
||
|
|
- screen
|
||
|
|
- coreutils
|
||
|
|
- openssl
|
||
|
|
- bash
|
||
|
|
- wget
|
||
|
|
sysctl:
|
||
|
|
forwarding:
|
||
|
|
- net.inet.ip.forwarding
|
||
|
|
- net.inet6.ip6.forwarding
|
||
|
|
tags:
|
||
|
|
- always
|
||
|
|
|
||
|
|
- name: Loopback included into the rc config
|
||
|
|
blockinfile:
|
||
|
|
dest: /etc/rc.conf
|
||
|
|
create: yes
|
||
|
|
block: |
|
||
|
|
cloned_interfaces="lo100"
|
||
|
|
ifconfig_lo100="inet {{ local_service_ip }} netmask 255.255.255.255"
|
||
|
|
ifconfig_lo100="inet6 FCAA::1/64"
|
||
|
|
notify:
|
||
|
|
- restart loopback bsd
|
||
|
|
tags:
|
||
|
|
- always
|
||
|
|
|
||
|
|
- name: Enable the gateway features
|
||
|
|
lineinfile: dest=/etc/rc.conf regexp='^{{ item.param }}.*' line='{{ item.param }}={{ item.value }}'
|
||
|
|
with_items:
|
||
|
|
- { param: firewall_enable, value: '"YES"' }
|
||
|
|
- { param: firewall_type, value: '"open"' }
|
||
|
|
- { param: gateway_enable, value: '"YES"' }
|
||
|
|
- { param: natd_enable, value: '"YES"' }
|
||
|
|
- { param: natd_interface, value: '"{{ ansible_default_ipv4.device|default() }}"' }
|
||
|
|
- { param: natd_flags, value: '"-dynamic -m"' }
|
||
|
|
notify:
|
||
|
|
- restart ipfw
|
||
|
|
tags:
|
||
|
|
- always
|
||
|
|
|
||
|
|
- name: FreeBSD | Activate IPFW
|
||
|
|
shell: >
|
||
|
|
kldstat -n ipfw.ko || kldload ipfw ; sysctl net.inet.ip.fw.enable=0 &&
|
||
|
|
bash /etc/rc.firewall && sysctl net.inet.ip.fw.enable=1
|
||
|
|
|
||
|
|
- meta: flush_handlers
|