Make reloading of firewall rules on update optional.

2019-08-28 11:35:51 +02:00
parent 8fee45bafa
commit 814a85a421
3 changed files with 7 additions and 4 deletions
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -24,3 +24,4 @@ iptables_rules_v6:
      policy: ACCEPT
    OUTPUT:
      policy: ACCEPT
+iptables_reload_on_update: true
--- a/handlers/main.yml
+++ b/handlers/main.yml
@@ -1,2 +0,0 @@
- name: Reload netfilter-persistent
-  command: netfilter-persistent reload
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -6,10 +6,14 @@
  template:
    src: rules-v4.j2
    dest: /etc/iptables/rules.v4
-  notify: Reload netfilter-persistent
+  register: rules_v4

 - name: rules.v6
  template:
    src: rules-v6.j2
    dest: /etc/iptables/rules.v6
-  notify: Reload netfilter-persistent
+  register: rules_v6
+
+- name: Reload netfilter-persistent
+  command: /usr/sbin/netfilter-persistent reload
+  when: iptables_reload_on_update and ( rules_v4 is changed or rules_v6 is changed )