From f1eaa5d773ee4de68397f49de654a764efa9e408 Mon Sep 17 00:00:00 2001 From: Kevin Fenzi Date: Mon, 26 Jun 2023 13:23:38 -0700 Subject: [PATCH] base / iptables: simplify logic Signed-off-by: Kevin Fenzi --- roles/base/tasks/main.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/roles/base/tasks/main.yml b/roles/base/tasks/main.yml index 6c77d26eaa..6b47a9929e 100644 --- a/roles/base/tasks/main.yml +++ b/roles/base/tasks/main.yml @@ -167,13 +167,13 @@ tags: - base - iptables - when: "'iad2' not in inventory_hostname or ( datacenter == 'iad2' and external == 'true')" + when: "'iad2' not in inventory_hostname or external is true" - name: setup blocklist ipset if this is a new install shell: "/usr/sbin/ipset create blocklist hash:ip; touch /etc/sysconfig/ipset-blocklist" args: creates: /etc/sysconfig/ipset-blocklist - when: "'iad2' not in inventory_hostname or ( datacenter == 'iad2' and external == 'true')" + when: "'iad2' not in inventory_hostname or external is true" tags: - base - iptables