Upload Ansible Files

2024-05-08 13:03:34 +02:00
parent 56902d524e
commit 9b520fbcfb
44 changed files with 1334 additions and 0 deletions
@@ -0,0 +1,18 @@
+- name: Ping to Host "{{ inventory_hostname }}"
+  ansible.builtin.ping:
+
+- name: ADD Firewall Role Ports 22,8006 for Primary Interface
+  ansible.builtin.shell:
+    iptables -t nat -A PREROUTING -i $(ip route get 8.8.8.8 | sed -n 's/.* dev \([^\ ]*\) .*/\1/p') -p tcp -m multiport ! --dport 22,8006 -j DNAT --to 10.0.0.2
+
+- name: ADD Firewall Role Ports UDP for Primary Interface
+  ansible.builtin.shell:
+    iptables -t nat -A PREROUTING -i $(ip route get 8.8.8.8 | sed -n 's/.* dev \([^\ ]*\) .*/\1/p') -p udp -j DNAT --to 10.0.0.2
+
+- name: ADD Firewall Role Privat Network
+  ansible.builtin.shell:
+    iptables -t nat -A POSTROUTING -s '10.0.0.0/30' -o $(ip route get 8.8.8.8 | sed -n 's/.* dev \([^\ ]*\) .*/\1/p') -j MASQUERADE
+
+- name: ADD IPv4 Forwarding
+  ansible.builtin.shell:
+    echo 1 > /proc/sys/net/ipv4/ip_forward