diff --git a/tasks/main.yml b/tasks/main.yml index 36d052a..416503a 100644 --- a/tasks/main.yml +++ b/tasks/main.yml @@ -5,6 +5,8 @@ state: present update_cache: yes +# Nejdriv bych zacal vypnutim stavajici service + - name: sw-node-exporter | PRE - 2. Stop, disable and mask ufw service ansible.builtin.systemd: state: stopped @@ -20,12 +22,17 @@ enabled: yes daemon_reload: yes +# Tady uz musis mit nejaky default set rules, at si neodrezes ssh + - name: sw-node-exporter | PRE - 4. Allow traffic in default zone on port 9100/tcp ansible.posix.firewalld: port: 9100/tcp permanent: yes state: enabled +#restart resis handlerem, tedy k tasku allow traffic napis notify: restart firewalld +# handler https://docs.ansible.com/ansible/latest/user_guide/playbooks_handlers.html + - name: sw-node-exporter | PRE - 5. Reload firewalld service ansible.builtin.systemd: state: restarted