From 2dc90631fb1646003c19fc92164e09bb17c50daf Mon Sep 17 00:00:00 2001 From: NaeiKinDus Date: Mon, 25 Dec 2023 00:00:00 +0000 Subject: [PATCH] refactor(security): fix line indentation in mangle table template --- .../security/templates/system/nftables/02-mangle.table.j2 | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/collections/ansible_collections/nullified/infrastructure/roles/security/templates/system/nftables/02-mangle.table.j2 b/collections/ansible_collections/nullified/infrastructure/roles/security/templates/system/nftables/02-mangle.table.j2 index dac87a8..026a1b0 100644 --- a/collections/ansible_collections/nullified/infrastructure/roles/security/templates/system/nftables/02-mangle.table.j2 +++ b/collections/ansible_collections/nullified/infrastructure/roles/security/templates/system/nftables/02-mangle.table.j2 @@ -26,9 +26,9 @@ table inet mangle { tcp flags & (fin|syn|rst|psh|ack|urg) == fin|psh|urg counter drop tcp flags & (fin|syn|rst|psh|ack|urg) == fin|syn|psh|urg counter drop tcp flags & (fin|syn|rst|psh|ack|urg) == fin|syn|rst|ack|urg counter drop - {% if firewall.mangle.drop_privatenets %} + {% if firewall.mangle.drop_privatenets -%} ip saddr $private_nets counter drop - {% endif %} + {% endif -%} ip saddr $reserved_nets counter drop iifname != "lo" ip saddr 127.0.0.0/8 counter drop }