8.5. 使用 firewalld RHEL 系统角色配置 DMZ firewalld 区域

流程

1. 创建包含以下内容的 playbook 文件，如 ~/configuring-a-dmz.yml ：

   ---
   - name: Configure firewalld
     hosts: managed-node-01.example.com
     tasks:
     - name: Creating a DMZ with access to HTTPS port and masquerading for hosts in DMZ
       include_role:
         name: rhel-system-roles.firewall
   
       vars:
         firewall:
           - zone: dmz
             interface: enp1s0
             service: https
             state: enabled
             runtime: true
             permanent: true

   Copy to Clipboard Toggle word wrap

2. 运行 playbook：

   # ansible-playbook ~/configuring-a-dmz.yml

   Copy to Clipboard Toggle word wrap