You've already forked ansible-role-csf
fix(ci): Applied yammlint fixes 🚨
This commit is contained in:
3
.github/workflows/CI.yml
vendored
3
.github/workflows/CI.yml
vendored
@@ -1,3 +1,4 @@
|
|||||||
|
---
|
||||||
name: CI
|
name: CI
|
||||||
on:
|
on:
|
||||||
push:
|
push:
|
||||||
@@ -14,7 +15,7 @@ jobs:
|
|||||||
- uses: actions/setup-python@v5
|
- uses: actions/setup-python@v5
|
||||||
with:
|
with:
|
||||||
python-version: '3.10'
|
python-version: '3.10'
|
||||||
cache: 'pip' # caching pip dependencies
|
cache: 'pip' # caching pip dependencies
|
||||||
|
|
||||||
- name: Ensure requirements are installed
|
- name: Ensure requirements are installed
|
||||||
run: pip install -r requirements.txt
|
run: pip install -r requirements.txt
|
||||||
|
|||||||
36
.yamllint
Normal file
36
.yamllint
Normal file
@@ -0,0 +1,36 @@
|
|||||||
|
---
|
||||||
|
# Based on ansible-lint config
|
||||||
|
extends: default
|
||||||
|
skip_list:
|
||||||
|
- fqcn-builtins
|
||||||
|
- role-name
|
||||||
|
|
||||||
|
rules:
|
||||||
|
braces:
|
||||||
|
max-spaces-inside: 1
|
||||||
|
level: error
|
||||||
|
brackets:
|
||||||
|
max-spaces-inside: 1
|
||||||
|
level: error
|
||||||
|
colons:
|
||||||
|
max-spaces-after: -1
|
||||||
|
level: error
|
||||||
|
commas:
|
||||||
|
max-spaces-after: -1
|
||||||
|
level: error
|
||||||
|
comments: enable
|
||||||
|
comments-indentation: disable
|
||||||
|
document-start: disable
|
||||||
|
empty-lines:
|
||||||
|
max: 3
|
||||||
|
level: error
|
||||||
|
hyphens:
|
||||||
|
level: error
|
||||||
|
indentation: disable
|
||||||
|
key-duplicates: enable
|
||||||
|
line-length: disable
|
||||||
|
new-line-at-end-of-file: enable
|
||||||
|
new-lines:
|
||||||
|
type: unix
|
||||||
|
trailing-spaces: disable
|
||||||
|
truthy: disable
|
||||||
@@ -36,61 +36,61 @@ csf_global_ini:
|
|||||||
- option: UDP_OUT
|
- option: UDP_OUT
|
||||||
value: "20,21,43,53,113,123,58745,30000:65535"
|
value: "20,21,43,53,113,123,58745,30000:65535"
|
||||||
|
|
||||||
#csf_allow:
|
# csf_allow:
|
||||||
# - 10.10.10.10
|
# - 10.10.10.10
|
||||||
# - 172.16.1.1/29
|
# - 172.16.1.1/29
|
||||||
|
|
||||||
#csf_ignore:
|
# csf_ignore:
|
||||||
# - 10.10.10.10
|
# - 10.10.10.10
|
||||||
# - 172.16.1.1/29
|
# - 172.16.1.1/29
|
||||||
|
|
||||||
#csf_pignore:
|
# csf_pignore:
|
||||||
# - 'exe:/usr/sbin/nginx'
|
# - 'exe:/usr/sbin/nginx'
|
||||||
# - 'user:mysql'
|
# - 'user:mysql'
|
||||||
|
|
||||||
#csf_fignore:
|
# csf_fignore:
|
||||||
# - '/tmp/\.horde'
|
# - '/tmp/\.horde'
|
||||||
# - '/tmp/\.horde/.*'
|
# - '/tmp/\.horde/.*'
|
||||||
|
|
||||||
#csf_blocklists:
|
# csf_blocklists:
|
||||||
# - "SPAMDROP"
|
# - "SPAMDROP"
|
||||||
|
|
||||||
#csf_dyndns:
|
# csf_dyndns:
|
||||||
# - "no-ip.com"
|
# - "no-ip.com"
|
||||||
|
|
||||||
#csf_csfpre_sh: |
|
# csf_csfpre_sh: |
|
||||||
# #!/bin/bash
|
# #!/bin/bash
|
||||||
# /sbin/iptables -t nat -F POSTROUTING
|
# /sbin/iptables -t nat -F POSTROUTING
|
||||||
|
|
||||||
#csf_csfpost_sh: |
|
# csf_csfpost_sh: |
|
||||||
# #!/bin/bash
|
# #!/bin/bash
|
||||||
# /sbin/iptables -t nat -F POSTROUTING
|
# /sbin/iptables -t nat -F POSTROUTING
|
||||||
|
|
||||||
# Host based custom allow rules
|
# Host based custom allow rules
|
||||||
#csf_allow_host:
|
# csf_allow_host:
|
||||||
# - 'tcp|in|d=22|s=1.1.1.1'
|
# - 'tcp|in|d=22|s=1.1.1.1'
|
||||||
|
|
||||||
#csf_ignore_host:
|
# csf_ignore_host:
|
||||||
# - '1.1.1.1'
|
# - '1.1.1.1'
|
||||||
|
|
||||||
#csf_pignore_host:
|
# csf_pignore_host:
|
||||||
# - 'exe:/usr/sbin/nginx'
|
# - 'exe:/usr/sbin/nginx'
|
||||||
# - 'user:mysql'
|
# - 'user:mysql'
|
||||||
|
|
||||||
#csf_fignore_host:
|
# csf_fignore_host:
|
||||||
# - '/tmp/\.horde'
|
# - '/tmp/\.horde'
|
||||||
# - '/tmp/\.horde/.*'
|
# - '/tmp/\.horde/.*'
|
||||||
|
|
||||||
#csf_blocklists_host:
|
# csf_blocklists_host:
|
||||||
# - "SPAMDROP"
|
# - "SPAMDROP"
|
||||||
|
|
||||||
#csf_dyndns_host:
|
# csf_dyndns_host:
|
||||||
# - "no-ip.com"
|
# - "no-ip.com"
|
||||||
|
|
||||||
#csf_csfpre_sh_host: |
|
# csf_csfpre_sh_host: |
|
||||||
# #!/bin/bash
|
# #!/bin/bash
|
||||||
# /sbin/iptables -t nat -F POSTROUTING
|
# /sbin/iptables -t nat -F POSTROUTING
|
||||||
|
|
||||||
#csf_csfpost_sh_host: |
|
# csf_csfpost_sh_host: |
|
||||||
# #!/bin/bash
|
# #!/bin/bash
|
||||||
# /sbin/iptables -t nat -F POSTROUTING
|
# /sbin/iptables -t nat -F POSTROUTING
|
||||||
|
|||||||
@@ -2,32 +2,34 @@
|
|||||||
dependencies: []
|
dependencies: []
|
||||||
|
|
||||||
galaxy_info:
|
galaxy_info:
|
||||||
author: cybercinch
|
author: cybercinch
|
||||||
description: Install and configure CSF/LFD (https://configserver.com/cp/csf.html)
|
description: >
|
||||||
min_ansible_version: "2.9"
|
Install and configure CSF/LFD
|
||||||
license: MIT
|
(https://configserver.com/cp/csf.html)
|
||||||
platforms:
|
min_ansible_version: "2.9"
|
||||||
- name: EL
|
license: MIT
|
||||||
versions:
|
platforms:
|
||||||
- "6"
|
- name: EL
|
||||||
- "7"
|
versions:
|
||||||
- "8"
|
- "6"
|
||||||
- "9"
|
- "7"
|
||||||
- name: Debian
|
- "8"
|
||||||
versions:
|
- "9"
|
||||||
- wheezy
|
- name: Debian
|
||||||
- jessie
|
versions:
|
||||||
- stretch
|
- wheezy
|
||||||
- name: Ubuntu
|
- jessie
|
||||||
versions:
|
- stretch
|
||||||
- precise
|
- name: Ubuntu
|
||||||
- trusty
|
versions:
|
||||||
- xenial
|
- precise
|
||||||
- bionic
|
- trusty
|
||||||
galaxy_tags:
|
- xenial
|
||||||
- csf
|
- bionic
|
||||||
- lfd
|
galaxy_tags:
|
||||||
- firewall
|
- csf
|
||||||
- iptables
|
- lfd
|
||||||
- networking
|
- firewall
|
||||||
- system
|
- iptables
|
||||||
|
- networking
|
||||||
|
- system
|
||||||
|
|||||||
Reference in New Issue
Block a user