UFW: adds missing allow rules for LXC communication

2024-07-21 12:37:21 +02:00 · 2024-07-21 12:37:21 +02:00 · 08bf40c99c
commit 08bf40c99c
parent d16c4c3693
1 changed files with 25 additions and 0 deletions
--- a/roles/firewall/tasks/main.yml
+++ b/roles/firewall/tasks/main.yml
@ -43,3 +43,28 @@
    rule: allow
    port: '{{ forgejo_ssh_port }}'
    proto: tcp
+
+# LXC
+# ufw allow in on lxcbr0
+# ufw route allow in on lxcbr0
+# ufw route allow out on lxcbr0
+
+- name: Allow in on lxcbr0
+  community.general.ufw:
+    rule: allow
+    interface: lxcbr0
+    direction: in
+
+- name: Route allow in on lxcbr0
+  community.general.ufw:
+    rule: allow
+    route: true
+    interface: lxcbr0
+    direction: in
+
+- name: Route allow out on lxcbr0
+  community.general.ufw:
+    rule: allow
+    route: true
+    interface: lxcbr0
+    direction: out