Files
configpolicy/roles/unifi/tasks/deploy.yml
Dustin C. Hatch 923c8a3ebc r/unifi: Open firewall port for syslog server
The Unifi Network controller runs a syslog server (listening on UDP port
5514) where Unifi devices can send their logs.  We need to open the port
in the firewall in order for it to receive log messages and write them
to disk.
2025-03-29 09:27:28 -05:00

52 lines
1.0 KiB
YAML

- name: ensure unifi.container systemd unit exists
template:
src: unifi.container.j2
dest: /etc/containers/systemd/unifi.container
owner: root
group: root
mode: u=rw,go=r
notify:
- reload systemd
- restart unifi
tags:
- container
- name: flush_handlers
meta: flush_handlers
- name: ensure unifi.service is running
systemd:
name: unifi.service
state: started
tags:
- service
- name: ensure firewall is configured for unifi
firewalld:
port: 8080/tcp
permanent: true
immediate: true
state: enabled
when: host_uses_firewalld|d(true)|bool
tags:
- firewalld
- name: ensure firewall is configured for unifi syslog
firewalld:
port: 5514/udp
permanent: true
immediate: true
state: enabled
when: host_uses_firewalld|d(true)|bool
tags:
- firewalld
- name: ensure caddy is configured to proxy for unifi
template:
src: unifi.caddyfile.j2
dest: /etc/caddy/Caddyfile.d/unifi.caddyfile
owner: root
group: root
mode: u=rw,go=r
notify:
- reload caddy