Removing disabling of iptables for Docker as doing so causes a lot of pain
This commit is contained in:
parent
74928165f7
commit
ddc2a1f327
1 changed files with 0 additions and 31 deletions
|
@ -1,37 +1,6 @@
|
|||
---
|
||||
# tasks file for traefik
|
||||
|
||||
- name: Ensure systemd docker.service.d directory exists
|
||||
file:
|
||||
path: "/etc/systemd/system/docker.service.d/"
|
||||
state: directory
|
||||
owner: root
|
||||
group: root
|
||||
mode: '0755'
|
||||
tags: firewall
|
||||
|
||||
- name: Provide systemd config to disable Docker's tampering with the firewall
|
||||
copy:
|
||||
dest: /etc/systemd/system/docker.service.d/noiptables.conf
|
||||
owner: root
|
||||
group: root
|
||||
mode: '0644'
|
||||
content: |
|
||||
[Service]
|
||||
ExecStart=
|
||||
ExecStart=/usr/bin/dockerd -H fd:// --iptables=false
|
||||
tags: firewall
|
||||
register: docker_restart_required
|
||||
|
||||
- name: Restart docker service to pickup config changes
|
||||
systemd:
|
||||
name: docker
|
||||
daemon_reload: yes
|
||||
state: restarted
|
||||
become: true
|
||||
when: docker_restart_required.changed
|
||||
tags: firewall
|
||||
|
||||
- name: Ensure traefik config directory exists
|
||||
file:
|
||||
path: /home/{{ docker_user }}/traefik
|
||||
|
|
Loading…
Add table
Reference in a new issue