mirror of
https://github.com/ansible-collections/community.general.git
synced 2025-04-25 11:51:26 -07:00
95a1170908
* Windows: Add special parameter types Adding explicit parameter types now exposes this information in the module documentation, and proves really helpful. We only do this for non-string types as strings, mostly because strings are implicit. PS We also make copyright statements consistent and use #Requires for explicit library imports * Type "string" must be type "str" * A few more Copyright corrections * More fixes * Don't add file encoding to Powershell files * Don't add missing interfacetypes parameter Otherwise CI demands an incorrect version_added * Small fix
64 lines
2 KiB
PowerShell
64 lines
2 KiB
PowerShell
#!powershell
|
|
|
|
# Copyright: (c) 2017, Michael Eaton <meaton@iforium.com>
|
|
# GNU General Public License v3.0+ (see COPYING or https://www.gnu.org/licenses/gpl-3.0.txt)
|
|
|
|
#Requires -Module Ansible.ModuleUtils.Legacy
|
|
|
|
$ErrorActionPreference = "Stop"
|
|
$firewall_profiles = @('Domain', 'Private', 'Public')
|
|
|
|
$params = Parse-Args $args -supports_check_mode $true
|
|
$check_mode = Get-AnsibleParam -obj $params -name "_ansible_check_mode" -type "bool" -default $false
|
|
|
|
$profiles = Get-AnsibleParam -obj $params -name "profiles" -type "list" -default @("Domain", "Private", "Public")
|
|
$state = Get-AnsibleParam -obj $params -name "state" -type "str" -failifempty $true -validateset 'disabled','enabled'
|
|
|
|
$result = @{
|
|
changed = $false
|
|
profiles = $profiles
|
|
state = $state
|
|
}
|
|
|
|
if ($PSVersionTable.PSVersion -lt [Version]"5.0") {
|
|
Fail-Json $result "win_firewall requires Windows Management Framework 5 or higher."
|
|
}
|
|
|
|
Try {
|
|
|
|
ForEach ($profile in $firewall_profiles) {
|
|
|
|
$currentstate = (Get-NetFirewallProfile -Name $profile).Enabled
|
|
$result.$profile = @{
|
|
enabled = ($currentstate -eq 1)
|
|
considered = ($profiles -contains $profile)
|
|
currentstate = $currentstate
|
|
}
|
|
|
|
if ($profiles -notcontains $profile) {
|
|
continue
|
|
}
|
|
|
|
if ($state -eq 'enabled') {
|
|
|
|
if ($currentstate -eq $false) {
|
|
Set-NetFirewallProfile -name $profile -Enabled true -WhatIf:$check_mode
|
|
$result.changed = $true
|
|
$result.$profile.enabled = $true
|
|
}
|
|
|
|
} else {
|
|
|
|
if ($currentstate -eq $true) {
|
|
Set-NetFirewallProfile -name $profile -Enabled false -WhatIf:$check_mode
|
|
$result.changed = $true
|
|
$result.$profile.enabled = $false
|
|
}
|
|
|
|
}
|
|
}
|
|
} Catch {
|
|
Fail-Json $result "an error occurred when attempting to change firewall status for profile $profile $($_.Exception.Message)"
|
|
}
|
|
|
|
Exit-Json $result
|