refactor(configuration): consolidate firewall into one phase-aware path

2026-05-27 05:28:00 +02:00
parent d922efd2e4
commit 00acd4d200
7 changed files with 67 additions and 23 deletions
--- a/roles/global_defaults/defaults/main.yml
+++ b/roles/global_defaults/defaults/main.yml
@@ -132,7 +132,7 @@ system_defaults:
      enabled: true
    firewall:
      enabled: true
-      backend: "firewalld" # firewalld|ufw
+      backend: "" # '' -> family default (EL/arch=firewalld, debian/ubuntu=ufw); override: firewalld|ufw
      toolkit: "nftables" # nftables|iptables
    ssh:
      enabled: true