Struct ConfigureFirewallStep 

pub struct ConfigureFirewallStep { /* private fields */ }

Step that configures UFW firewall on a remote host via Ansible

This step configures a restrictive UFW firewall policy while ensuring SSH access is maintained. The SSH port is resolved during template rendering and embedded in the final Ansible playbook. The configuration follows the principle of “allow SSH BEFORE enabling firewall” to prevent lockout.

Implementations

impl ConfigureFirewallStep

pub fn new(ansible_client: Arc<AnsibleClient>) -> Self

Create a new firewall configuration step

Arguments

• ansible_client - Ansible client for running playbooks

Note

SSH port configuration is resolved during template rendering phase, not at step execution time. The rendered playbook contains the resolved SSH port value.

pub fn execute( &self, listener: Option<&dyn CommandProgressListener>, ) -> Result<(), CommandError>

Execute the firewall configuration

Arguments

• listener - Optional progress listener for reporting step-level details. When provided, reports debug information (Ansible commands, working directory) and detail information (firewall policies, SSH access preservation, status).

Safety

This method is designed to prevent SSH lockout by:

1. Resetting UFW to clean state
2. Allowing SSH access BEFORE enabling firewall
3. Using the correct SSH port from user configuration

The SSH port is resolved during template rendering and embedded in the playbook, so this method executes a playbook with pre-configured values.

Errors

Returns CommandError if:

• Ansible playbook execution fails
• UFW commands fail
• SSH rules cannot be applied
• Firewall verification fails