diff --git a/common.yml b/common.yml index 0ca0754..6814716 100644 --- a/common.yml +++ b/common.yml @@ -78,6 +78,20 @@ key: "{{ lookup('file', 'keys/'+ item + '.key.pub') }}" with_items: "{{ users }}" + - name: Fix Debian10's shitty iptables support + file: + src: '{{ item.src }}' + dest: '{{ item.dest }}' + state: link + loop: + - { src: /usr/sbin/iptables-save, dest: /bin/iptables-save } + - { src: /usr/sbin/iptables-restore, dest: /bin/iptables-restore } + - { src: /usr/sbin/iptables-apply, dest: /bin/iptables-apply } + - { src: /usr/sbin/ip6tables-save, dest: /bin/ip6tables-save } + - { src: /usr/sbin/ip6tables-restore, dest: /bin/ip6tables-restore } + - { src: /usr/sbin/ip6tables-apply, dest: /bin/ip6tables-apply } + when: ansible_distribution == 'Debian' and ansible_distribution_major_version == '10' + - name: create rules.v4 blockinfile: create: yes