Skip to content

Commit cfcca4a

Browse files
committed
fix(finalize-ami.yml): Need to split the ufw tasks back up since they have different tags
1 parent 812adc5 commit cfcca4a

File tree

1 file changed

+21
-5
lines changed

1 file changed

+21
-5
lines changed

ansible/tasks/finalize-ami.yml

Lines changed: 21 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -4,18 +4,34 @@
44
group: 'postgres'
55
src: 'files/postgresql_config/postgresql-csvlog.conf'
66

7-
- name: UFW - Allow SSH/PostgreSQL/PgBouncer/HTTP/HTTPS connections
7+
- name: UFW - Allow SSH connections
88
community.general.ufw:
9-
name: "{{ port_item }}"
9+
name: 'OpenSSH'
10+
rule: 'allow'
11+
12+
- name: UFW - Allow SSH/PostgreSQL connections
13+
community.general.ufw:
14+
port: '5432'
15+
rule: 'allow'
16+
17+
- name: UFW - Allow PgBouncer connections
18+
community.general.ufw:
19+
port: '6543'
20+
rule: 'allow'
21+
tags:
22+
- install-pgbouncer
23+
24+
- name: UFW - Allow HTTP/HTTPS connections
25+
community.general.ufw:
26+
port: "{{ port_item }}"
1027
rule: 'allow'
1128
loop:
12-
- 'OpenSSH'
13-
- '5432'
14-
- '6543'
1529
- 'http'
1630
- 'https'
1731
loop_control:
1832
loop_var: 'port_item'
33+
tags:
34+
- install-supabase-internal
1935

2036
- name: UFW - Deny all other incoming traffic by default
2137
community.general.ufw:

0 commit comments

Comments
 (0)