play-5650-xenomorph-02-ufw.yml

- hosts: xenomorph
  tasks:
    - name: allow ssh
      community.general.ufw:
        rule: limit
        port: "22" # ssh
        proto: tcp
    - name: allow proxmox web
      community.general.ufw:
        rule: allow
        port: "8006" # proxmox web
        proto: tcp
    - name: allow http
      community.general.ufw:
        rule: allow
        port: "80"
        proto: tcp
    - name: allow https
      community.general.ufw:
        rule: allow
        port: "443"
        proto: tcp
    - name: deny everything and enable ufw
      community.general.ufw:
        state: enabled
        policy: deny # blackhole