group_vars/docker.yml

@@ -8,3 +8,14 @@ docker_package_state: present
 docker_compose_version: "1.25.0"
 docker_users:
   - deploy
+firewall_disable_ufw: true
+firewall_flush_rules_and_chains: true
+firewall_allowed_tcp_ports:
+  - "22"
+  - "80"
+  - "443"
+#firewall_allowed_udp_ports:
+#  # Jitsi
+#  - "10000"
+firewall_additional_rules:
+  - "iptables -P INPUT DROP"

group_vars/vagrant.yml

@@ -1,14 +1,10 @@
 ansible_user: vagrant
 firewall_disable_ufw: true
-firewall_flush_rules_and_chains: false
+firewall_flush_rules_and_chains: true
-firewall_additional_rules:
-  - "iptables -P INPUT DENY"
 firewall_allowed_tcp_ports:
-  - "22"
+ - "22"
-  - "80"
+ - "80"
-  - "443"
+ - "443"
-  # Jitsi
-  - "4443"
 firewall_allowed_udp_ports:
   # Jitsi
   - "10000"