ansible-opnsense

Ansible role to configure OPNsense firewalls.

This is the RLS detached fork of the original from https://github.com/naturalis/ansible-opnsense.

As of Oct 5, 2023 this became the main repository, as the original was removed (see #35).
We like to thank @rudibroekhuizen and all other contributors from @naturalis for their greate work and we are happy to use their contributions as a base for further development.

Requirements

• OPNsense firewall with shell access
• python lxml

Role Variables

We try to provide some example variable definitions in the coresponding task and test (test/*.yml) files.

Dependencies

sudo apt install python3-lxml

or

pip install lxml

optional

sudo apt install secure-delete (optional)

Example Playbook

Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:

---
- hosts: firewalls
  gather_facts: false
  become: false
  roles:
    - ansible-opnsense
...

Become on play level is not needed for XML changes on localhost, only for tasks to fetch/push config.xml and restart services on OPNsense.

Ansible command

ansible-playbook -D firewalls.yml -l firewall1 -t user,fetch,copy,reload

Related Links

Sample Playbook

• https://github.com/Rosa-Luxemburgstiftung-Berlin/ansible-opnsense-playbook

Other possible usefull ansible roles related to opnsense

• https://github.com/Rosa-Luxemburgstiftung-Berlin/ansible-opnsense-facts
• https://github.com/Rosa-Luxemburgstiftung-Berlin/ansible-opnsense-checkmk
• https://github.com/Rosa-Luxemburgstiftung-Berlin/ansible-opnsense-plugpack
• https://github.com/Rosa-Luxemburgstiftung-Berlin/ansible-opnsense-update
• https://github.com/zerwes/opnsense-fail2ban

License

Apache 2.0

Author Information

• Rudi Broekhuizen - [email protected]
• Privazio - [email protected] - https://github.com/privazio
• Foppe Pieters - [email protected]
• Klaus Zerwes - https://github.com/zerwes