firewalld
A service or port allowed through firewalld, now and after reboots.
Arguments
Section titled “Arguments”| Name | Type | Required | Description |
|---|---|---|---|
on_remove |
string | No | “delete” (default) closes the port again when the rule is removed or replaced, “forget” leaves it open. |
port |
string | No | Port and protocol, such as 8080/tcp or 60000-61000/udp. Set this or service. |
service |
string | No | firewalld service name, such as http. Set this or port. |
zone |
string | No | Zone. Defaults to firewalld’s default zone. |
Read-only attributes
Section titled “Read-only attributes”Conn3x sets these; reference them as conn3x_firewalld.<circuit>__<step>["<host>"].<name>.
| Name | Type | Description |
|---|---|---|
in_sync |
bool | Whether the running and permanent firewall both allow it. |
A step lowers to the conn3x_firewalld resource, one instance per host, and connects with its circuit’s ssh block.