From 5c1f0e17b8b0e9ebba6078854c1224e7f5d93ac2 Mon Sep 17 00:00:00 2001
From: Jan Tuomi <jan@jantuomi.fi>
Date: Sun, 30 Nov 2025 11:50:29 +0200
Subject: pf changes

---
 tasks/jail_ingress.yml |  3 +++
 tasks/network.yml      | 20 --------------------
 2 files changed, 3 insertions(+), 20 deletions(-)

(limited to 'tasks')

diff --git a/tasks/jail_ingress.yml b/tasks/jail_ingress.yml
index 87dff41..b971372 100644
--- a/tasks/jail_ingress.yml
+++ b/tasks/jail_ingress.yml
@@ -14,6 +14,9 @@
     group: wheel
     mode: "0644"
 
+- name: Reload pf.conf
+  shell: jexec ingress pfctl -f /etc/pf.conf
+
 - name: Enable gateway mode
   shell: jexec ingress sysrc gateway_enable=YES && jexec ingress sysctl net.inet.ip.forwarding=1
 
diff --git a/tasks/network.yml b/tasks/network.yml
index 3b95380..5f60d05 100644
--- a/tasks/network.yml
+++ b/tasks/network.yml
@@ -42,28 +42,8 @@
     name: syslogd
     state: started
   register: started_syslogd
-
 #- name: Restart syslogd
 #  service:
 #    name: syslogd
 #    state: restarted
 #  when: not started_syslogd.changed and rc_conf.changed
-
-- name: Configure pf
-  template:
-    src: etc_pf.conf.j2
-    dest: /etc/pf.conf
-    owner: root
-    group: wheel
-    mode: "0644"
-    backup: yes
-  register: pf_conf
-
-- name: Start pf
-  service:
-    name: pf
-    state: started
-
-- name: Reload pf rules
-  shell: pfctl -f /etc/pf.conf
-  when: pf_conf.changed
-- 
cgit v1.3