sprinterfreak/ansible-ffrgb
1
0
Fork 0
forked from FF-RGB/ansible
Code Pull Requests 1 Releases Activity

Set systcl values in exit-ipv4

Browse Source
This commit is contained in:
Markus 2017-03-27 23:47:16 +02:00
parent 016fce0043
commit 588112b25f
2 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
roles/exit-ipv4/defaults/main.yml Normal file
View File

@ -0,0 +1,3 @@
---
conntrack_max: 131072

6
roles/exit-ipv4/tasks/main.yml
View File

@ -3,6 +3,12 @@
- name: Install iptables-persistent - name: Install iptables-persistent
apt: name=iptables-persistent state=present apt: name=iptables-persistent state=present
- name: Enable IPv4 routing
sysctl: name=net.ipv4.ip_forward value=1 state=present
- name: Increas conntrack limit
sysctl: name=net.netfilter.nf_conntrack_max value={{ conntrack_max }} state=present
- name: Configure iptables - name: Configure iptables
template: src=rules.v4.j2 dest=/etc/iptables/rules.v4 template: src=rules.v4.j2 dest=/etc/iptables/rules.v4
notify: Reload iptables notify: Reload iptables