fix(nftables): ajouter port 9095 dans le template gateway, supprimer lineinfile cassé

Les règles ajoutées par lineinfile se retrouvaient hors du bloc table/chain.
Port 9095 (hermes-auto-improve) maintenant géré proprement dans le template gateway.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
alkatrazz 2026-06-03 00:25:24 +02:00
parent 3f9772c9d1
commit 5d76ff1f4b
2 changed files with 3 additions and 8 deletions

View file

@ -47,11 +47,3 @@
state: started
daemon_reload: true
- name: Open port in nftables
ansible.builtin.lineinfile:
path: /etc/nftables.conf
insertafter: '# prometheus'
line: " tcp dport {{ hermes_auto_improve_port }} ip saddr { 10.42.0.0/16, 192.168.10.0/24 } accept comment \"hermes-auto-improve\""
state: present
notify: Reload nftables
ignore_errors: true