aboutsummaryrefslogtreecommitdiff
path: root/roles/ssh-nginx-multiplex/tasks/ssh_nginx_setup.yaml
diff options
context:
space:
mode:
authorheqnx <root@heqnx.com>2025-05-29 19:34:32 +0300
committerheqnx <root@heqnx.com>2025-05-29 19:34:32 +0300
commitb8f1d76bd38d03e68fbc51f8e7340a9963a4104d (patch)
tree1cf7347b862e4c6059463ea6b811f44a0d37c41c /roles/ssh-nginx-multiplex/tasks/ssh_nginx_setup.yaml
parent0e9c8dc71a87b86a9d99c82b5f9aaa37dffeb9bd (diff)
downloadansible-playbooks-b8f1d76bd38d03e68fbc51f8e7340a9963a4104d.tar.gz
ansible-playbooks-b8f1d76bd38d03e68fbc51f8e7340a9963a4104d.zip
removed handlers, need to run all the time
Diffstat (limited to 'roles/ssh-nginx-multiplex/tasks/ssh_nginx_setup.yaml')
-rw-r--r--roles/ssh-nginx-multiplex/tasks/ssh_nginx_setup.yaml31
1 files changed, 26 insertions, 5 deletions
diff --git a/roles/ssh-nginx-multiplex/tasks/ssh_nginx_setup.yaml b/roles/ssh-nginx-multiplex/tasks/ssh_nginx_setup.yaml
index beb0910..75a790c 100644
--- a/roles/ssh-nginx-multiplex/tasks/ssh_nginx_setup.yaml
+++ b/roles/ssh-nginx-multiplex/tasks/ssh_nginx_setup.yaml
@@ -41,7 +41,13 @@
owner: root
group: root
mode: '0644'
- notify: restart nginx
+
+ - name: restart nginx
+ systemd:
+ name: nginx
+ state: restarted
+ enabled: true
+ when: ansible_service_mgr == 'systemd'
- name: deploy sslh config file
template:
@@ -50,16 +56,19 @@
owner: root
group: root
mode: '0644'
- notify: restart sslh
+
+ - name: restart sslh
+ systemd:
+ name: sslh
+ state: restarted
+ enabled: true
+ when: ansible_service_mgr == 'systemd'
- name: allow ssh port and enable ufw
ufw:
rule: allow
port: "{{ internal_sshd_port }}"
proto: tcp
- notify:
- - enable ufw
- - restart ufw
- name: allow http port and enable ufw
ufw:
@@ -70,6 +79,18 @@
- enable ufw
- restart ufw
+ - name: enable ufw
+ ufw:
+ state: enabled
+ policy: deny
+
+ - name: restart ufw
+ systemd:
+ name: ufw
+ state: restarted
+ enabled: true
+ when: ansible_service_mgr == 'systemd'
+
when:
- public_sslh_port is defined
- internal_nginx_port is defined