initial upload

roles/firewall/defaults/main.yml

@@ -0,0 +1,28 @@
+---
+
+firewall_enabled: yes
+firewall_standard_rules: yes
+firewall_log_prefix: "FW:"
+firewall_whitelist_ip: []
+firewall_whitelist_ipv6: []
+firewall_late_whitelist_ip: []
+firewall_late_whitelist_ipv6: []
+
+firewall_input_default_drop: true
+firewall_output_default_drop: true
+firewall_output_whitelist_domains: []
+firewall_output_whitelist_ipv4: []
+firewall_output_whitelist_ipv6: []
+firewall_output_learning: false
+
+firewall_whitelist_office_ip: []
+firewall_whitelist_office_ports: []
+
+firewall_ssh_acl: []
+firewall_ssh_acl_extra: []
+firewall_influx_acl: []
+firewall_influx_acl_extra: []
+firewall_allow_internal_dns: true
+
+firewall_custom_ipv4_rules: ""
+firewall_custom_ipv6_rules: ""