From 7d1cceb27108883fbe4d7cb2aef321eeec9623dd Mon Sep 17 00:00:00 2001
From: Joe Banks <joe@jb3.dev>
Date: Fri, 30 Aug 2024 18:54:09 +0100
Subject: Setup firewall rule for Rocky hosts in munin-node

---
 ansible/roles/munin-node/tasks/main.yml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

(limited to 'ansible')

diff --git a/ansible/roles/munin-node/tasks/main.yml b/ansible/roles/munin-node/tasks/main.yml
index 9c9026e..bbc1671 100644
--- a/ansible/roles/munin-node/tasks/main.yml
+++ b/ansible/roles/munin-node/tasks/main.yml
@@ -6,6 +6,18 @@
   tags:
     - role::munin-node
 
+- name: Create firewall rule for Rocky Linux Munin nodes
+  ansible.posix.firewalld:
+    service: "munin-node"
+    permanent: true
+    zone: wireguard
+    state: enabled
+  tags:
+    - role::munin-node
+  when: ansible_distribution == "Rocky"
+  notify:
+    - Reload the firewall
+
 - name: Template munin-node configuration file
   template:
     src: munin-node.conf.j2
-- 
cgit v1.2.3