From 6d467c7b7dfd4f79d82a4ed6c4f7ea8a7e145f38 Mon Sep 17 00:00:00 2001
From: "Dustin C. Hatch" <dustin@hatch.name>
Date: Sat, 13 Oct 2018 12:18:02 -0500
Subject: [PATCH] dch-vpn: Avoid configuring firewalld

FirewallD cannot be configured to allow traffic to be routed through the
system without NAT. This makes it unsuitable for running on a VPN
concentrator. Thus, any role that would configure FirewallD needs to be
informed that this machine does not use it.
---
 group_vars/dch-vpn.yml | 1 +
 1 file changed, 1 insertion(+)
 create mode 100644 group_vars/dch-vpn.yml

diff --git a/group_vars/dch-vpn.yml b/group_vars/dch-vpn.yml
new file mode 100644
index 0000000..0c78839
--- /dev/null
+++ b/group_vars/dch-vpn.yml
@@ -0,0 +1 @@
+host_uses_firewalld: false