From fbe2f24e25f510c61556e052f71611277a68e1b2 Mon Sep 17 00:00:00 2001
From: Jan Tuomi <jan@jantuomi.fi>
Date: Mon, 23 Jun 2025 14:42:09 +0300
Subject: Add pf rules

---
 tasks/network.yml | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

(limited to 'tasks/network.yml')

diff --git a/tasks/network.yml b/tasks/network.yml
index 5a59e30..2a4ec23 100644
--- a/tasks/network.yml
+++ b/tasks/network.yml
@@ -40,3 +40,21 @@
 
 - name: Disable syslogd remote listening
   shell: sysrc syslogd_flags="-s" && service syslogd restart
+
+- name: Configure pf
+  template:
+    src: etc_pf.conf.j2
+    dest: /etc/pf.conf
+    owner: root
+    group: wheel
+    mode: "0644"
+    backup: yes
+
+- name: Enable and start pf
+  service:
+    name: pf
+    enabled: true
+    state: started
+
+- name: Reload pf rules
+  shell: pfctl -f /etc/pf.conf
-- 
cgit v1.3