---
# file: roles/base/tasks/debian_firewall.yml

- name: Allow SSH access through the firewall
  ufw:
    rule: allow
    port: "22"
    proto: tcp
    interface: eth0
    direction: in
  notify: Reload UFW

- name: Allow web management access through the firewall
  ufw:
    rule: allow
    port: "9090"
    proto: tcp
  notify: Reload UFW
  when: base_core_web_management == true
  tags:
  - web_management

- name: Enable firewall
  ufw:
    state: enabled