Merge pull request #86 from ansible-lockdown/ufw_optional

Ufw optional
ansible-lockdown · Jul 19, 2023 · 4c02b43 · 4c02b43
2 parents a9ab947 + cb9ea8c
commit 4c02b43
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 4 deletions.
diff --git a/defaults/main.yml b/defaults/main.yml
@@ -493,7 +493,7 @@ ubtu20cis_ufw_allow_out_ports:
 
 ufw_add_incoming: false
 ubtu20cis_ufw_allow_in:
-    - ports: 22
+    - port: 22
       from: any
       proto: tcp
 

diff --git a/tasks/section_3/cis_3.5.1.x.yml b/tasks/section_3/cis_3.5.1.x.yml
@@ -164,10 +164,11 @@
       rule: allow
       direction: in
       from_ip: '{{ item.from }}'
-      to_port: '{{ item.ports }}'
+      to_port: '{{ item.port }}'
       proto: '{{ item.proto }}'
-  loop:
-      - "{{ ubtu20cis_ufw_allow_in }}"
+  loop: "{{ ubtu20cis_ufw_allow_in }}"
+  loop_control:
+      label: "{{ item.port }}"
   notify: reload ufw
   when: ufw_add_incoming
   tags: