From c44ca7c262a57dad4972caa81f9f1424306fcf8a Mon Sep 17 00:00:00 2001
From: Simon <simon@greenhost.nl>
Date: Thu, 21 Oct 2021 10:31:18 +0200
Subject: [PATCH] Add handler to restart nftables after deploying nftables.conf
---
ansible/roles/pre-configure/handlers/main.yml | 5 +++++
ansible/roles/pre-configure/tasks/firewall.yml | 1 +
2 files changed, 6 insertions(+)
diff --git a/ansible/roles/pre-configure/handlers/main.yml b/ansible/roles/pre-configure/handlers/main.yml
index 55ed86310..39c3fccf7 100644
--- a/ansible/roles/pre-configure/handlers/main.yml
+++ b/ansible/roles/pre-configure/handlers/main.yml
@@ -3,3 +3,8 @@
service:
name: systemd-journald
state: restarted
+
+- name: restart-nftables
+ service:
+ name: nftables
+ state: restarted
diff --git a/ansible/roles/pre-configure/tasks/firewall.yml b/ansible/roles/pre-configure/tasks/firewall.yml
index a94a49059..681d41395 100644
--- a/ansible/roles/pre-configure/tasks/firewall.yml
+++ b/ansible/roles/pre-configure/tasks/firewall.yml
@@ -15,6 +15,7 @@
src: nftables.conf
mode: '0755'
become: true
+ notify: restart-nftables
- name: Enable and start nftables service
tags:
--
GitLab