From 7854a729b775bb88494d19700696960612533ee1 Mon Sep 17 00:00:00 2001
From: "Dustin C. Hatch" <dustin@hatch.name>
Date: Sat, 31 Aug 2024 19:03:20 -0500
Subject: [PATCH] r/minio: Add option to disable firewall rules

If MinIO is behind a reverse proxy, we do not want to expose it directly
to the network.
---
 roles/minio/tasks/deploy.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/roles/minio/tasks/deploy.yml b/roles/minio/tasks/deploy.yml
index 7391786..0b75b2a 100644
--- a/roles/minio/tasks/deploy.yml
+++ b/roles/minio/tasks/deploy.yml
@@ -117,7 +117,7 @@
     port: '{{ item }}/tcp'
     permanent: true
     immediate: true
-    state: enabled
+    state: '{{ "enabled" if minio_allow_outside|d(true) else "disabled" }}'
   loop:
   - 9000
   - 9090