tsg-tsg-os-buildimage/ansible/roles/firewall/tasks/main.yml

---
- name: "download rpm packages: firewall"
  yum:
    name: "{{ item.value }}"
    conf_file: "{{ rpm_repo_config_path }}"
    state: present
    download_only: yes
    download_dir: "{{ path_download }}"
  with_dict: "{{ firewall_rpm_version }}"

- name: "Install firwall that are sapp plugins"
  shell: rpm -i /tmp/rpm_download/{{ item.1 }}* --prefix {{ prefix_path.sapp }}
  when:
    - item.1 is not search("stellar-c")
    - item.1 is not search("firewall")
  loop: "{{ firewall_rpm_version | dictsort }}"

- name: "Install firwall and stellar-c rpm plugins"
  shell: rpm -i /tmp/rpm_download/{{ item }}* --prefix /opt/tsg/
  with_items:
    - "{{ firewall_rpm_version['stellar-c'] }}"
    - "{{ firewall_rpm_version['firewall'] }}"

- name: "Template the tsgconf/main.conf"
  template:
    src: "{{ role_path }}/templates/main.conf.j2.j2"
    dest: /opt/tsg/tsg-os-provision/templates/main.conf.j2
  tags: template
  when: runtime_env != 'TSG-X-P0906'

- name: "Template the tsgconf/maat.conf"
  template:
    src: "{{ role_path }}/templates/maat.conf.j2.j2"
    dest: /opt/tsg/tsg-os-provision/templates/maat.conf.j2
  tags: template
  when: runtime_env != 'TSG-X-P0906'

- name: "Template the conf/http/http.conf"
  template:
    src: "{{ role_path }}/templates/http.conf.j2"
    dest:  /opt/tsg/sapp/conf/http/http.conf
  tags: template

- name: "Template the conf/quic/main.conf"
  template:
    src: "{{ role_path }}/templates/quic/main.conf.j2"
    dest:  /opt/tsg/sapp/conf/quic/main.conf
  tags: template

- name: "Template the /opt/tsg/sapp/plug/business/firewall/firewall.inf"
  template:
    src: "{{ role_path }}/templates/firewall.inf.j2.j2"
    dest: /opt/tsg/tsg-os-provision/templates/firewall.inf.j2
  tags: template
  when: runtime_env != 'TSG-X-P0906'