81 lines
2.1 KiB
YAML
81 lines
2.1 KiB
YAML
---
|
|
- name: Create netstat security group
|
|
delegate_to: localhost
|
|
ec2_group:
|
|
ec2_access_key: "{{ access_key }}"
|
|
ec2_secret_key: "{{ secret_key }}"
|
|
name: "{{ netstat_security_group }}"
|
|
description: "Default security group"
|
|
region: "{{ region }}"
|
|
purge_rules: true
|
|
|
|
- name: Allow outbound traffic
|
|
delegate_to: localhost
|
|
ec2_group:
|
|
ec2_access_key: "{{ access_key }}"
|
|
ec2_secret_key: "{{ secret_key }}"
|
|
name: "{{ netstat_security_group }}"
|
|
description: "Default security group"
|
|
region: "{{ region }}"
|
|
purge_rules_egress: false
|
|
purge_rules: false
|
|
rules_egress:
|
|
- proto: all
|
|
from_port: all
|
|
to_port: all
|
|
cidr_ip: 0.0.0.0/0
|
|
|
|
- name: Add ssh access
|
|
delegate_to: localhost
|
|
ec2_group:
|
|
ec2_access_key: "{{ access_key }}"
|
|
ec2_secret_key: "{{ secret_key }}"
|
|
name: "{{ netstat_security_group }}"
|
|
description: "Default security group"
|
|
region: "{{ region }}"
|
|
purge_rules_egress: false
|
|
purge_rules: false
|
|
rules:
|
|
- proto: tcp
|
|
from_port: "{{ item }}"
|
|
to_port: "{{ item }}"
|
|
cidr_ip: 0.0.0.0/0
|
|
with_items:
|
|
- "22"
|
|
when: allow_netstat_ssh == true
|
|
|
|
- name: Add https access
|
|
delegate_to: localhost
|
|
ec2_group:
|
|
ec2_access_key: "{{ access_key }}"
|
|
ec2_secret_key: "{{ secret_key }}"
|
|
name: "{{ netstat_security_group }}"
|
|
description: "Default security group"
|
|
region: "{{ region }}"
|
|
purge_rules_egress: false
|
|
purge_rules: false
|
|
rules:
|
|
- proto: tcp
|
|
from_port: 443
|
|
to_port: 443
|
|
cidr_ip: 0.0.0.0/0
|
|
|
|
- name: Add http-3000 access
|
|
delegate_to: localhost
|
|
ec2_group:
|
|
ec2_access_key: "{{ access_key }}"
|
|
ec2_secret_key: "{{ secret_key }}"
|
|
name: "{{ netstat_security_group }}"
|
|
description: "Default security group"
|
|
region: "{{ region }}"
|
|
purge_rules_egress: false
|
|
purge_rules: false
|
|
rules:
|
|
- proto: tcp
|
|
from_port: "{{ item }}"
|
|
to_port: "{{ item }}"
|
|
cidr_ip: 0.0.0.0/0
|
|
with_items:
|
|
- "3000"
|
|
when: allow_netstat_http == true
|