chore(agent): Move hardcoded fw zone to defaults (#38)

radiorabe · Dec 1, 2024 · 8e41769 · 8e41769
1 parent 5a4690f
commit 8e41769
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/roles/agent/defaults/main.yml b/roles/agent/defaults/main.yml
@@ -14,3 +14,5 @@ _radiorabe_zabbix_agent_zabbix_agent_tls: cert
 _radiorabe_zabbix_agent_zabbix_agent_cafile: /etc/ipa/ca.crt
 _radiorabe_zabbix_agent_zabbix_agent_tlscertfile: /etc/pki/tls/certs/zabbix-agent.crt
 _radiorabe_zabbix_agent_zabbix_agent_tlskeyfile: /etc/pki/tls/private/zabbix-agent.key
+
+_radiorabe_zabbix_agent_firewall_zone: service
diff --git a/roles/agent/tasks/main.yaml b/roles/agent/tasks/main.yaml
@@ -98,7 +98,7 @@
   vars:
     firewall:
       - rich_rule: ['rule family="ipv4" source address="{{ _rabe_zabbix_server_ip }}" service name="zabbix-agent" accept']
-        zone: service
+        zone: "{{ _radiorabe_zabbix_agent_firewall_zone }}"
         state: enabled
   tags:
     - role::rabe_zabbix.agent