ansible-freeipa/Fedora.yml at 0bcb4eaf0fc66e6bdf1c4a2afaaf92de1be4538e - ansible-freeipa - Gitea: Git with a cup of tea

internet/ansible-freeipa

mirror of https://github.com/freeipa/ansible-freeipa.git synced 2026-06-10 02:35:54 +00:00

Files

Alexander Bokovoy 592680f51f Install and enable firewalld if it is configured for ipareplica role

ipareplica role by default tries to configure firewalld but it didn't
check if firewalld related packages were installed.

Similar to DNS and trust to AD features, install firewalld-related
packages before trying to configure firewalld.

Additionally, enable and start firewalld.service because otherwise
firewall-cmd cannot communicate with firewalld itself (it is not
starting on demand).

If and administrator considers not to use firewalld, a default for
ipareplica_setup_firewalld variable has to be set to 'no'.

Fixes: https://github.com/freeipa/ansible-freeipa/issues/116

2019-12-09 21:30:14 +02:00

6 lines

275 B

YAML

Raw Blame History

 # Fedora defaults file for ipareplica
 # vars/Fedora.yml
 ipareplica_packages: [ "freeipa-server", "python3-libselinux" ]
 ipareplica_packages_dns: [ "freeipa-server-dns" ]
 ipareplica_packages_adtrust: [ "freeipa-server-trust-ad" ]
 ipareplica_packages_firewalld: [ "firewalld" ]