---
shorewall_config_opts:
  startup_enabled: 'Yes'
  verbosity: '1'                    # [0=Silent|1=Major|2=All]
  log_level: 'info'
  log_martians: 'Yes'
  log_verbosity: '2'                # [-1=disabled|0=Silent|1=Major|2=All]
  logfile: '/var/log/messages.log'
  logformat: 'Shorewall:%s:%s:'
  loglimit: 's:1/sec:10'
  startup_log: '/var/log/shorewall-init.log'
  docker: 'No'                      # shorewall5 only
  ip_forwarding: 'On'               # [On|Off|Keep]

# default policies go here (if you wish to define them in the role)
shorewall_interfaces_default: []
shorewall_policies_default: []
shorewall_rules_default: []
shorewall_zones_default: []

## define possible overrides so we're not left with empty lists
# define in group_vars/all
shorewall_zones_all: []
shorewall_policies_all: []
shorewall_interfaces_all: []
shorewall_rules_all: []

# define in group_vars/groupname
shorewall_zones_group: []
shorewall_policies_group: [] 
shorewall_interfaces_group: []
shorewall_rules_group: []

# define in host_vars/hostname
shorewall_zones_host: []
shorewall_policies_host: []
shorewall_interfaces_host: []
shorewall_rules_host: []