WoodSmellParticle/ansible-infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(security): fixed wordwrap breaking long strings (ipv6 addresses) in nftables.conf

Browse source
This commit is contained in:
NaeiKinDus 2024-08-08 00:00:00 +00:00
parent 9ab416993e
commit b83c6c1d4f
Signed by: WoodSmellParticle
GPG key ID: 8E52ADFF7CA8AE56
1 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
collections/ansible_collections/nullified/infrastructure/roles/security/templates/system/debian/nftables.conf.j2
View file

@ -3,21 +3,21 @@
flush ruleset flush ruleset
define ansible_controllers_ip4 = { define ansible_controllers_ip4 = {
{{ security_firewall_supervisors_ip4 | join(", ") | wordwrap(40, wrapstring="\n ") }} {{ security_firewall_supervisors_ip4 | join(", ") | wordwrap(40, wrapstring="\n ", break_long_words=False) }}
} }
{% if security_firewall_supervisors_ip6 %} {% if security_firewall_supervisors_ip6 %}
define ansible_controllers_ip6 = { define ansible_controllers_ip6 = {
{{ security_firewall_supervisors_ip6 | join(", ") | wordwrap(40, wrapstring="\n ") }} {{ security_firewall_supervisors_ip6 | join(", ") | wordwrap(40, wrapstring="\n ", break_long_words=False) }}
} }
{% endif %} {% endif %}
{% if security_firewall_dns4_servers -%} {% if security_firewall_dns4_servers -%}
define dns_servers = { define dns_servers = {
{{ security_firewall_dns4_servers | join(", ") | wordwrap(40, wrapstring="\n\t") }} {{ security_firewall_dns4_servers | join(", ") | wordwrap(40, wrapstring="\n\t", break_long_words=False) }}
} }
{% endif -%} {% endif -%}
{% if security_firewall_dns6_servers -%} {% if security_firewall_dns6_servers -%}
define dns_servers6 = { define dns_servers6 = {
{{ security_firewall_dns6_servers | join(", ") | wordwrap(40, wrapstring="\n\t") }} {{ security_firewall_dns6_servers | join(", ") | wordwrap(40, wrapstring="\n\t", break_long_words=False) }}
} }
{% endif -%} {% endif -%}
define private_nets = { define private_nets = {