ed7eabd399
-redo of some roles, particularly GUI -modifications to support working from a "Raspbian Lite" install
191 lines
4.5 KiB
YAML
191 lines
4.5 KiB
YAML
---
|
|
- name: Install ufw packages
|
|
package:
|
|
name: ufw
|
|
state: present
|
|
become: true
|
|
- name: Allow all access from RFC1918 networks to this hosts
|
|
ufw:
|
|
rule: allow
|
|
src: '{{ item }}'
|
|
with_items:
|
|
- 10.0.0.0/8
|
|
- 172.16.0.0/12
|
|
- 192.168.0.0/16
|
|
become: true
|
|
- name: Allow all access from any Comcast IP Space
|
|
become: true
|
|
ufw:
|
|
rule: allow
|
|
src: '{{ item }} '
|
|
with_items:
|
|
- 72.94.169.223/32
|
|
- 100.96.0.0/11
|
|
- 103.72.193.0/24
|
|
- 107.0.0.0/14
|
|
- 107.4.0.0/15
|
|
- 108.171.224.0/20
|
|
- 147.191.0.0/16
|
|
- 162.148.0.0/14
|
|
- 162.17.0.0/16
|
|
- 165.137.0.0/16
|
|
- 169.152.0.0/16
|
|
- 169.152.0.0/16
|
|
- 173.160.0.0/13
|
|
- 173.8.0.0/13
|
|
- 174.160.0.0/11
|
|
- 174.48.0.0/12
|
|
- 184.108.0.0/14
|
|
- 184.112.0.0/12
|
|
- 193.57.148.0/22
|
|
- 198.0.0.0/16
|
|
- 198.137.252.0/23
|
|
- 198.178.8.0/21
|
|
- 207.223.0.0/20
|
|
- 208.110.192.0/19
|
|
- 208.39.128.0/18
|
|
- 209.23.192.0/18
|
|
- 216.45.128.0/17
|
|
- 23.24.0.0/15
|
|
- 23.30.0.0/15
|
|
- 23.68.0.0/14
|
|
- 232.128.0.0/13
|
|
- 232.232.0.0/14
|
|
- 232.36.0.0/14
|
|
- 232.40.0.0/14
|
|
- 232.44.0.0/14
|
|
- 232.48.0.0/14
|
|
- 232.52.0.0/14
|
|
- 232.56.0.0/14
|
|
- 232.64.0.0/14
|
|
- 232.80.0.0/14
|
|
- 232.96.0.0/14
|
|
- 239.12.0.0/14
|
|
- 239.16.0.0/14
|
|
- 239.20.0.0/14
|
|
- 239.24.0.0/14
|
|
- 239.28.0.0/14
|
|
- 239.32.0.0/14
|
|
- 24.0.0.0/12
|
|
- 24.104.0.0/17
|
|
- 24.104.128.0/19
|
|
- 24.118.0.0/16
|
|
- 24.124.128.0/17
|
|
- 24.125.0.0/16
|
|
- 24.126.0.0/15
|
|
- 24.128.0.0/16
|
|
- 24.129.0.0/17
|
|
- 24.130.0.0/15
|
|
- 24.147.0.0/16
|
|
- 24.149.128.0/17
|
|
- 24.153.64.0/19
|
|
- 24.153.72.0/21
|
|
- 24.16.0.0/13
|
|
- 24.218.0.0/16
|
|
- 24.245.0.0/18
|
|
- 24.30.0.0/17
|
|
- 24.34.0.0/16
|
|
- 24.40.0.0/18
|
|
- 24.40.64.0/20
|
|
- 24.60.0.0/14
|
|
- 24.91.0.0/16
|
|
- 24.98.0.0/15
|
|
- 3.81.241.149
|
|
- 50.128.0.0/9
|
|
- 50.73.0.0/16
|
|
- 50.76.0.0/14
|
|
- 64.139.64.0/19
|
|
- 64.235.160.0/19
|
|
- 64.56.32.0/19
|
|
- 64.78.64.0/18
|
|
- 65.34.128.0/17
|
|
- 65.96.0.0/16
|
|
- 66.176.0.0/15
|
|
- 66.208.192.0/18
|
|
- 66.229.0.0/16
|
|
- 66.240.0.0/18
|
|
- 66.30.0.0/15
|
|
- 66.41.0.0/16
|
|
- 66.56.0.0/18
|
|
- 67.160.0.0/11
|
|
- 67.178.0.0/17
|
|
- 67.178.128.0/17
|
|
- 67.179.0.0/16
|
|
- 68.32.0.0/11
|
|
- 68.80.0.0/13
|
|
- 68.85.0.0/20
|
|
- 68.85.128.0/17
|
|
- 68.85.16.0/20
|
|
- 68.85.32.0/19
|
|
- 68.85.64.0/18
|
|
- 68.86.0.0/18
|
|
- 68.86.128.0/17
|
|
- 68.86.64.0/18
|
|
- 68.87.0.0/20
|
|
- 68.87.128.0/18
|
|
- 68.87.16.0/20
|
|
- 68.87.192.0/19
|
|
- 68.87.224.0/20
|
|
- 68.87.240.0/20
|
|
- 68.87.32.0/19
|
|
- 68.87.64.0/18
|
|
- 69.136.0.0/13
|
|
- 69.139.128.0/20
|
|
- 69.139.144.0/20
|
|
- 69.139.160.0/19
|
|
- 69.139.192.0/18
|
|
- 69.180.0.0/15
|
|
- 69.240.0.0/12
|
|
- 70.88.0.0/14
|
|
- 71.192.0.0/12
|
|
- 71.224.0.0/12
|
|
- 71.24.0.0/14
|
|
- 71.56.0.0/13
|
|
- 72.55.0.0/17
|
|
- 73.0.0.0/8
|
|
- 74.144.0.0/12
|
|
- 74.16.0.0/12
|
|
- 74.81.128.0/19
|
|
- 74.92.0.0/14
|
|
- 75.144.0.0/13
|
|
- 75.64.0.0/13
|
|
- 75.72.0.0/15
|
|
- 75.74.0.0/16
|
|
- 75.75.0.0/17
|
|
- 75.75.128.0/18
|
|
- 75.75.72.0/21
|
|
- 76.128.0.0/11
|
|
- 76.16.0.0/12
|
|
- 76.96.0.0/11
|
|
- 96.100.0.0/14
|
|
- 96.106.0.0/15
|
|
- 96.108.0.0/17
|
|
- 96.108.128.0/18
|
|
- 96.108.192.0/19
|
|
- 96.108.224.0/19
|
|
- 96.109.0.0/16
|
|
- 96.110.0.0/16
|
|
- 96.111.0.0/16
|
|
- 96.112.0.0/13
|
|
- 96.120.0.0/14
|
|
- 96.124.0.0/16
|
|
- 96.128.0.0/10
|
|
- 96.192.0.0/11
|
|
- 96.64.0.0/11
|
|
- 96.96.0.0/12
|
|
- 98.192.0.0/10
|
|
- 98.205.0.0/16
|
|
- 98.241.0.0/16
|
|
- 98.32.0.0/11
|
|
- name: Allow DHCP
|
|
ufw:
|
|
rule: allow
|
|
to_port: 67
|
|
become: true
|
|
tags: ufw_dhcp
|
|
- name: Enable UFW
|
|
ufw:
|
|
state: enabled
|
|
policy: deny
|
|
become: true
|