Skip to content

Commit

Permalink
Remove unnecessary UFW profile creation task.
Browse files Browse the repository at this point in the history
The Apache package from "deb.sury.org" now provides a UFW profile. For
more information, see:

  - <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1071705> and
  - <https://launchpad.net/~ondrej/+archive/ubuntu/apache2/+sourcepub/16281368/+listing-archive-extra>.
  • Loading branch information
damiendart committed Aug 26, 2024
1 parent 155fc59 commit a5c6897
Showing 1 changed file with 0 additions and 16 deletions.
16 changes: 0 additions & 16 deletions roles/webserver/tasks/main.yml
Original file line number Diff line number Diff line change
Expand Up @@ -45,22 +45,6 @@
- 'apache2'
- "{{ webserver__php_versions | map('regex_replace', '^(.*)$', 'php\\1-fpm') }}"

# The Apache package from "deb.sury.org" does not provide an UFW
# profile. The following profile is based on the one Debian/Ubuntu
# includes with its Apache package.
- name: 'Ensure an Apache UFW profile exists'
ansible.builtin.copy:
content: |
[Apache Full]
title=Web Server (HTTP,HTTPS)
description=The Apache web server.
ports=80,443/tcp
dest: '/etc/ufw/applications.d/apache2-utils.ufw.profile'
owner: 'root'
group: 'root'
mode: 0644
notify: 'Restart UFW'

- name: 'Ensure the Apache UFW profile is active'
community.general.ufw:
name: 'Apache Full'
Expand Down

0 comments on commit a5c6897

Please sign in to comment.