Re: How to manage a firewall script with minor tweaks for different machines?

[Anssi Saari <as@sci.fi>]

Andy Smith <andy@strugglers.net> writes:

> Ansible can be very simple and quick to learn and everything you've
> mentioned in your post can easily be done with it.

Thanks, I'd heard of Ansible before and I tried it and cdist and decided
to do this with Ansible. Mostly because I couldn't get anywhere with
cdist.

Ansible is a little whiny and frustrating so I did some things like
editing a config file in an ssh loop since Ansible didn't run my
perfectly fine sed thingy. 

So anyways, my various firewall configs are in place; the ability to
include a directory from nftables turned out to be the solution for
different firewall configs on different machines.