Merge pull request #1305 from mira-miracoli/fix-influx-firewall

InfluxDB enable FirewallD and set rules

group_vars/influxdb.yml

@@ -81,3 +81,13 @@ nginx_remove_default_vhost: true
 nginx_ssl_role: usegalaxy-eu.certbot
 nginx_conf_ssl_certificate: /etc/ssl/certs/fullchain.pem
 nginx_conf_ssl_certificate_key: /etc/ssl/user/privkey-nginx.pem
+
+firewall_public_services:
+  - http
+  - https
+  - d-s-n # name for port 8086
+firewall_internal_services:
+  - http
+  - https
+  - ssh
+  - d-s-n

influxdb.yml

@@ -18,15 +18,12 @@
         persistent: true
       loop:
         - httpd_can_network_connect
-    - name: Disable firewalld service
-      ansible.builtin.service:
-        name: firewalld
-        enabled: false
-        state: stopped
   collections:
     - devsec.hardening
   roles:
     ## Starting configuration of the operating system
+    - role: usegalaxy_eu.fw_glxeu_generic
+      become: true
     - role: usegalaxy_eu.handy.os_setup
       vars:
         enable_hostname: true