Merge pull request #83 from richlamdev/simplify-ufw

move basic ufw rule to base role, omit ufw role

Author: richlamdev

main.yml

@@ -9,26 +9,25 @@
     - vars.yml
 
   roles:
-    - auto-update
+    # - auto-update
     - base
-    - aws
-    - brave
-    - chrome
-    # - docker-cli-only
-    - docker-desktop-dependency
-    - gh_cli
-    - hashicorp
-    - keepassxc
-    - kubectl
-    - microsoft
-    - opera
-    - signal-desktop
-    - sublime-text
-    - trivy
-    - ufw
+    # - aws
+    # - brave
+    # - chrome
+    # # - docker-cli-only
+    # - docker-desktop-dependency
+    # - gh_cli
+    # - hashicorp
+    # - keepassxc
+    # - kubectl
+    # - microsoft
+    # - opera
+    # - signal-desktop
+    # - sublime-text
+    # - trivy
     - role: vim
       become: false
     - role: env
       become: false
-    - disable-local-dns
+    # - disable-local-dns
     # - yubico

roles/base/tasks/main.yml

@@ -25,3 +25,6 @@
 
 - name: autostart tasks
   import_tasks: autostart.yml
+
+- name: configure ufw
+  import_tasks: ufw.yml

roles/base/tasks/ufw.yml

@@ -0,0 +1,7 @@
+---
+- name: Limit inbound SSH traffic on port 22 for 192.168.0.0/16 network
+  ansible.builtin.ufw:
+    rule: limit
+    port: 22
+    proto: tcp
+    from_ip: 192.168.0.0/16