Improved firewall loop

tasks/main.yml

@@ -18,41 +18,24 @@
   tags:
         - setup
         - packages
-- name: Allow Unbound TCP through iptables
+- name: Allow Unbound through iptables
   loop:
-          - ipv4
+        - { ipv: 'ipv4', proto: 'tcp' }
-          - ipv6
+        - { ipv: 'ipv6', proto: 'tcp' }
+        - { ipv: 'ipv4', proto: 'udp' }
+        - { ipv: 'ipv6', proto: 'udp' }
   iptables:
-          chain: INPUT
+        chain: INPUT
-          ctstate:
+        ctstate:
-                  - NEW
+                - NEW
-                  - ESTABLISHED
+                - ESTABLISHED
-                  - RELATED
+                - RELATED
-          destination_port: "53"
+        destination_port: "53"
-          jump: ACCEPT
+        jump: ACCEPT
-          ip_version: '{{ item }}'
+        ip_version: '{{ item.ipv }}'
-          protocol: tcp
+        protocol: '{{ item.proto }}'
   notify:
-          - Save netfilter rules
+        - Save netfilter rules
-  tags:
-        - update
-        - firewall
-- name: Allow Unbound UDP through iptables
-  loop:
-          - ipv4
-          - ipv6
-  iptables:
-          chain: INPUT
-          ctstate:
-                  - NEW
-                  - ESTABLISHED
-                  - RELATED
-          destination_port: "53"
-          jump: ACCEPT
-          ip_version: '{{ item }}'
-          protocol: udp
-  notify:
-          - Save netfilter rules
   tags:
         - update
         - firewall