From 88f83d5eb7c3c45fdf305ddfe7bec857a8cd61e0 Mon Sep 17 00:00:00 2001
From: Jonathan Struebel <jonathan.struebel@gmail.com>
Date: Sat, 10 Sep 2016 22:17:21 +0000
Subject: [PATCH] Remove ferm dependency and put rules in envvar. See
 debops/debops-playbooks#192 for details

---
 defaults/main.yml | 26 ++++++++++++++++++++++++++
 meta/main.yml     | 25 -------------------------
 2 files changed, 26 insertions(+), 25 deletions(-)

diff --git a/defaults/main.yml b/defaults/main.yml
index 2895ad0..3f81129 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -246,3 +246,29 @@ samba__default_shares:
     guest_ok: 'yes'
 
 # .. )))
+
+# .. envvar:: samba__ferm__dependent_rules: (((
+#
+# Configuration for :command:`iptables` firewall managed by :program:`ferm`.
+samba__ferm__dependent_rules:
+
+  - type: 'dport_accept'
+    protocol: [ 'udp' ]
+    dport: [ 'netbios-ns', 'netbios-dgm' ]
+    saddr: '{{ samba__allow }}'
+    accept_any: True
+    filename: 'samba__dependency_accept_udp'
+    delete: '{{ "samba" not in samba__base_packages }}'
+    weight: '50'
+
+  - type: 'dport_accept'
+    protocol: [ 'tcp' ]
+    dport: [ 'netbios-ssn', 'microsoft-ds' ]
+    saddr: '{{ samba__allow }}'
+    accept_any: True
+    filename: 'samba__dependency_accept_tcp'
+    delete: '{{ "samba" not in samba__base_packages }}'
+    weight: '50'
+
+
+# .. )))
diff --git a/meta/main.yml b/meta/main.yml
index 6cb7e99..c323881 100644
--- a/meta/main.yml
+++ b/meta/main.yml
@@ -1,30 +1,5 @@
 ---
 
-dependencies:
-
-  - role: debops.ferm
-    tags: [ 'depend::ferm', 'depend::ferm:samba',
-            'depend-of::samba', 'type::dependency' ]
-    ferm_input_list:
-
-      - type: 'dport_accept'
-        protocol: [ 'udp' ]
-        dport: [ 'netbios-ns', 'netbios-dgm' ]
-        saddr: '{{ samba__allow }}'
-        accept_any: True
-        filename: 'samba__dependency_accept_udp'
-        delete: '{{ "samba" not in samba__base_packages }}'
-        weight: '50'
-
-      - type: 'dport_accept'
-        protocol: [ 'tcp' ]
-        dport: [ 'netbios-ssn', 'microsoft-ds' ]
-        saddr: '{{ samba__allow }}'
-        accept_any: True
-        filename: 'samba__dependency_accept_tcp'
-        delete: '{{ "samba" not in samba__base_packages }}'
-        weight: '50'
-
 galaxy_info:
 
   company: 'DebOps'