diff --git a/defaults/main.yml b/defaults/main.yml index 18cdf4b..906c294 100644 --- a/defaults/main.yml +++ b/defaults/main.yml @@ -24,3 +24,4 @@ iptables_rules_v6: policy: ACCEPT OUTPUT: policy: ACCEPT +iptables_reload_on_update: true diff --git a/handlers/main.yml b/handlers/main.yml deleted file mode 100644 index 22d75a1..0000000 --- a/handlers/main.yml +++ /dev/null @@ -1,2 +0,0 @@ -- name: Reload netfilter-persistent - command: netfilter-persistent reload diff --git a/tasks/main.yml b/tasks/main.yml index 7a7c139..ecf6267 100644 --- a/tasks/main.yml +++ b/tasks/main.yml @@ -6,10 +6,14 @@ template: src: rules-v4.j2 dest: /etc/iptables/rules.v4 - notify: Reload netfilter-persistent + register: rules_v4 - name: rules.v6 template: src: rules-v6.j2 dest: /etc/iptables/rules.v6 - notify: Reload netfilter-persistent + register: rules_v6 + +- name: Reload netfilter-persistent + command: /usr/sbin/netfilter-persistent reload + when: iptables_reload_on_update and ( rules_v4 is changed or rules_v6 is changed )