allow loops for campus and vpn

these rules are dynamically built and expected by the template
pulibrary · Dec 20, 2024 · dd740f0 · dd740f0
1 parent e435348
commit dd740f0
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/roles/ufw_firewall/vars/main.yml b/roles/ufw_firewall/vars/main.yml
@@ -1,2 +1,8 @@
 ---
 # vars file for roles/ufw_firewall
+ufw_firewall_rules: >
+    {%- set rules = [] -%}
+    {%- for network in ufw_campus_and_vpn -%}
+    {{ rules.append({'protocol': 'tcp', 'source': network, 'port': 22, 'action': 'ACCEPT'}) }}
+    {%- endfor -%}
+    {{ rules }}