vm-ansible/roles/neko/tasks/main.yaml

---
- name: "Install haproxy via apt"
  apt:
    update_cache: yes
    state: present
    name:
     - haproxy

- name: Enable haproxy
  service:
    name: haproxy
    state: started
    enabled: yes

- name: "Install certbot via apt"
  apt:
    update_cache: yes
    state: present
    name:
     - python3-certbot

- name: Reset ufw rules to default
  community.general.ufw:
    state: reset

- name: Enable ufw
  community.general.ufw:
    state: enabled

- name: Allow ssh via ufw from localnet
  community.general.ufw:
    rule: allow
    direction: in
    port: ssh
    from_ip: "192.168.69.0/24"
    interface: eth0

- name: Allow http via ufw from internet
  community.general.ufw:
    rule: allow
    direction: in
    port: http
    interface: eth1

- name: Allow https via ufw from internet
  community.general.ufw:
    rule: allow
    direction: in
    port: https
    interface: eth1

- name: Allow http via ufw from internet
  community.general.ufw:
    rule: allow
    direction: in
    port: http
    interface: eth1

- name: Allow neko ports via ufw from internet
  community.general.ufw:
    rule: allow
    direction: in
    port: 59000:59049
    proto: udp
    interface: eth1