Skip to content

Commit d51b156

Browse files
committed
fix: [#18] remove redundant UFW app profile task that fails on Ubuntu VMs
The 'Allow SSH service by name' task was using a non-existent UFW application profile 'ssh' which caused the playbook to fail before enabling the firewall. This task was redundant because SSH is already explicitly allowed by port number in the previous task. Fixes Issue #4 identified in PR review - UFW fails with 'Could not find a profile matching ssh'
1 parent 91224b5 commit d51b156

File tree

1 file changed

+0
-10
lines changed

1 file changed

+0
-10
lines changed

templates/ansible/configure-firewall.yml.tera

Lines changed: 0 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -57,16 +57,6 @@
5757
- firewall
5858
- ssh
5959

60-
- name: Allow SSH service by name (additional safety measure)
61-
community.general.ufw:
62-
rule: allow
63-
name: ssh
64-
comment: "SSH service (standard SSH)"
65-
tags:
66-
- security
67-
- firewall
68-
- ssh
69-
7060
- name: Enable UFW firewall (AFTER SSH rules are in place)
7161
community.general.ufw:
7262
state: enabled

0 commit comments

Comments
 (0)