---
- name: Create firewall directory
  file:
    path: /var/local/firewall
    state: directory
    mode: '2775'
    owner: root
    group: nounou

- name: Set ACL for firewall directory
  acl:
    path: /var/local/firewall
    default: true
    entity: nounou
    etype: group
    permissions: rwx
    state: query

- name: Clone firewall repository
  git:
    repo: 'http://gitlab.adm.crans.org/nounous/firewall.git'
    dest: /var/local/firewall
    umask: '002'

- name: Deploy re2o config
  template:
    src: firewall/re2o-config.ini.j2
    dest: /var/local/firewall/re2o-config.ini
    mode: 0600
    owner: root
    group: root

- name: Deploy cron for firewall
  template:
    src: cron.d/firewall.j2
    dest: /etc/cron.d/firewall