the-nine-worlds/ansible-edda
the-nine-worlds/ansible-edda
1
0
Fork 0
Code Issues 1 Pull Requests Packages Projects Releases Wiki Activity

Restart networking when nftables is restarted

Browse Source
This commit is contained in:
Wojciech Kozlowski 2022-09-25 13:15:17 +02:00
parent 18263b3556
commit 1b291adb38
2 changed files with 10 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
playbooks/filesystem/yggdrasil/etc/network/interfaces.d/br0.j2
View File

@ -4,9 +4,9 @@ iface br0 inet static
post-up /usr/local/sbin/post-up-$IFACE.nft post-up /usr/local/sbin/post-up-$IFACE.nft
post-up ip rule add dev $IFACE table 66 post-up ip rule add dev $IFACE table 66
post-up ip route add {{ subnet }} dev {{ ethx }} table 66 post-up ip rule add dev $IFACE to {{ subnet }} table main priority 1
pre-down ip route del {{ subnet }} dev {{ ethx }} table 66 pre-down ip rule del dev $IFACE to {{ subnet }} table main priority 1
pre-down ip rule del dev $IFACE table 66 pre-down ip rule del dev $IFACE table 66
pre-down /usr/local/sbin/pre-down-$IFACE.nft pre-down /usr/local/sbin/pre-down-$IFACE.nft

8
playbooks/tasks/hosts/firewall.yml
View File

@ -19,5 +19,13 @@
systemd: systemd:
name: nftables name: nftables
state: restarted state: restarted
register: nftables_restart
when: when:
nftables_conf is changed nftables_conf is changed
- name: Restart networking
systemd:
name: networking
state: restarted
when:
nftables_restart is changed